On 14/10/2014 13:45, Guido Günther wrote:
On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
On 14/10/2014 13:10, Guido Günther wrote:
>On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
>>policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
>>configured libvirt to work with polkit correctly
>>
>>/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
>>
>>org.libvirt.unix.manage.pkla contains (notice the filename ending
>>(.pkla) as
>>we have polkit 0.105 in sid currently, after 0.106 the ending is not
>>required)
>>
>>[Allow fred libvirt management permissions]
>>Identity=unix-user:fred
>>Action=org.libvirt.unix.manage
>>ResultAny=yes
>>ResultInactive=yes
>>ResultActive=yes
>
>This should not be necessary if your user is in the libvirt group. Can
>you check?
>Cheers,
> -- Guido

user is in the libvirt group but without the above it fails with

error: failed to connect to the hypervisor
error: authentication failed: no agent is available to authenticate

changing pkla file to

[Allow group libvirt management permissions]
Identity=unix-group:libvirt
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes


this works for all users in libvirt group

Is your /etc/libvirt/libvirtd.conf the default one?
 -- Guido


apart for the commented out lines there is nothing in /etc/libvirt/libvirtd.conf

cat /etc/libvirt/libvirt.conf
#
# This can be used to setup URI aliases for frequently
# used connection URIs. Aliases may contain only the
# characters  a-Z, 0-9, _, -.
#
# Following the '=' may be any valid libvirt connection
# URI, including arbitrary parameters

#uri_aliases = [
#  "hail=qemu+ssh://r...@hail.cloud.example.com/system",
#  "sleet=qemu+ssh://r...@sleet.cloud.example.com/system",
#]

#
# This can be used to prevent probing of the hypervisor
# driver when no URI is supplied by the application.

#uri_default = "qemu:///system"


Regards,

Adrian


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to