On 14/10/2014 13:45, Guido Günther wrote:
On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
On 14/10/2014 13:10, Guido Günther wrote:
>On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
>>policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
>>configured libvirt to work with polkit correctly
>>
>>/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
>>
>>org.libvirt.unix.manage.pkla contains (notice the filename ending
>>(.pkla) as
>>we have polkit 0.105 in sid currently, after 0.106 the ending is not
>>required)
>>
>>[Allow fred libvirt management permissions]
>>Identity=unix-user:fred
>>Action=org.libvirt.unix.manage
>>ResultAny=yes
>>ResultInactive=yes
>>ResultActive=yes
>
>This should not be necessary if your user is in the libvirt group. Can
>you check?
>Cheers,
> -- Guido
user is in the libvirt group but without the above it fails with
error: failed to connect to the hypervisor
error: authentication failed: no agent is available to authenticate
changing pkla file to
[Allow group libvirt management permissions]
Identity=unix-group:libvirt
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes
this works for all users in libvirt group
Is your /etc/libvirt/libvirtd.conf the default one?
-- Guido
apart for the commented out lines there is nothing in
/etc/libvirt/libvirtd.conf
cat /etc/libvirt/libvirt.conf
#
# This can be used to setup URI aliases for frequently
# used connection URIs. Aliases may contain only the
# characters a-Z, 0-9, _, -.
#
# Following the '=' may be any valid libvirt connection
# URI, including arbitrary parameters
#uri_aliases = [
# "hail=qemu+ssh://r...@hail.cloud.example.com/system",
# "sleet=qemu+ssh://r...@sleet.cloud.example.com/system",
#]
#
# This can be used to prevent probing of the hypervisor
# driver when no URI is supplied by the application.
#uri_default = "qemu:///system"
Regards,
Adrian
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
