Your message dated Sat, 18 Jun 2011 09:25:58 +0000
with message-id <[email protected]>
and subject line Bug#629689: Removed package(s) from unstable
has caused the Debian Bug report #578408,
regarding cnetworkmanager dbus config prevents nm-applet from asking about 
password
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
578408: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=578408
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: cnetworkmanager
Version: 0.21.1-1
Severity: important

The rule I comment below :
        <policy at_console="true">
                <allow own="org.freedesktop.NetworkManagerUserSettings"/>
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"/>
                <!-- Only root can get secrets -->
<!--                <deny 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                      
send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
-->
        </policy>
is at_console thus overides the nm-applet.conf user="root" rule that allow the :
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                       
send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>

ie:
        <policy user="root">
                <allow own="org.freedesktop.NetworkManagerUserSettings"/>

                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                       send_interface="org.freedesktop.NetworkManagerSettings"/>

                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                       
send_interface="org.freedesktop.NetworkManagerSettings.Connection"/>

                <!-- Only root can get secrets -->
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                       
send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
        </policy>

In short as NetworkManager does not show the gerror from the: secrets_result 
function in src/nm-activation-request.c in NetworkManager
the fact that this rule is denied is silently ignored. The symptom is 
dbus-monitor --system:
signal sender=:1.569 -> dest=(null destination) serial=260008 
path=/org/freedesktop/NetworkManager/Devices/1; 
interface=org.freedesktop.NetworkManager.Device; member=StateChanged
   uint32 5
   uint32 4
   uint32 0
signal sender=:1.569 -> dest=(null destination) serial=260009 
path=/org/freedesktop/NetworkManager/Devices/1; 
interface=org.freedesktop.NetworkManager.Device; member=StateChanged
   uint32 6
   uint32 5
   uint32 0
signal sender=:1.569 -> dest=(null destination) serial=260013 
path=/org/freedesktop/NetworkManager/Devices/1; 
interface=org.freedesktop.NetworkManager.Device.Wireless; 
member=PropertiesChanged
   array [
      dict entry(
         string "State"
         variant             uint32 6
      )
   ]
signal sender=:1.569 -> dest=(null destination) serial=260014 
path=/org/freedesktop/NetworkManager/Devices/1; 
interface=org.freedesktop.NetworkManager.Device; member=StateChanged
   uint32 9
   uint32 6
   uint32 7
signal sender=:1.569 -> dest=(null destination) serial=260017 
path=/org/freedesktop/NetworkManager/Devices/1; 
interface=org.freedesktop.NetworkManager.Device.Wireless; 
member=PropertiesChanged
   array [
      dict entry(
         string "State"
         variant             uint32 9
      )
   ]


ie that state change to 6 (AUTH needed) to 9 (failure) witrh reason 7 (no 
secrets provided).

The nm-applet log is:
** (nm-applet:5476): WARNING **: Error in getting active connection 'Vpn' 
property: (19) Method "Get" with signature "ss" on interface 
"org.freedesktop.DBus.Properties" doesn't exist


** (nm-applet:5476): WARNING **: _nm_object_array_demarshal: couldn't create 
object for /org/freedesktop/NetworkManager/ActiveConnection/1

as due to the failure to get secret the (here I do not use vpn) the 
activeconnection is discarded and then later on when nm tries to check the Vpn 
property on the active connection
this one is no more thus the error shown above.

Thank you to either use policykit or enable the :
 <allow send_destination="org.freedesktop.NetworkManagerUserSettings"
                       
send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
in the user="root" to fix this one.


Maybe this bug should be cloned to ask for nm to log the dbus error in 
secrets_result function in src/nm-activation-request.c. Please do if you 
believe so too. 

Best regards,
Alban




-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.34-rc4-wleeepc (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages cnetworkmanager depends on:
ii  network-manager               0.8-1      network management framework daemo
ii  python                        2.5.4-9    An interactive high-level object-o
ii  python-dbus                   0.83.1-1   simple interprocess messaging syst
ii  python-support                1.0.7      automated rebuilding support for P

cnetworkmanager recommends no packages.

cnetworkmanager suggests no packages.

-- Configuration Files:
/etc/dbus-1/system.d/cnetworkmanager.conf changed:
<!DOCTYPE busconfig PUBLIC
 "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN"
 "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd";>
<busconfig>
        <policy user="root">
                <allow own="org.freedesktop.NetworkManagerUserSettings"/>
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"/>
        </policy>
        <policy at_console="true">
                <allow own="org.freedesktop.NetworkManagerUserSettings"/>
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"/>
                <!-- Only root can get secrets -->
<!--                <deny 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                      
send_interface="org.freedesktop.NetworkManagerSettings.Connection.Secrets"/>
-->
        </policy>
        <policy context="default">
                <deny 
send_destination="org.freedesktop.NetworkManagerUserSettings"/>
                <allow 
send_destination="org.freedesktop.NetworkManagerUserSettings"
                       send_interface="org.freedesktop.DBus.Introspectable"/>
        </policy>
        <limit name="max_replies_per_connection">512</limit>
</busconfig>


-- no debconf information



--- End Message ---
--- Begin Message ---
Version: 0.21.1-1.1+rm

Dear submitter,

as the package cnetworkmanager has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see http://bugs.debian.org/629689

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].

Debian distribution maintenance software
pp.
Luca Falavigna (the ftpmaster behind the curtain)


--- End Message ---

Reply via email to