Hello James, thank you for your help, that file was existing and containes the lines you mentioned.
I found the problem earlier today. In the postinst script of plinth i found: # Due to a change in sudo, now it runs PAM modules even on password-less # invocations. This leads to plinth not being able to run root privileges. This # is because of our own restrictions in /etc/security/access.conf. Since Plinth # is locked out after upgrade, we need to do this in postinst. sed -i 's+-:ALL EXCEPT root fbx (admin) (sudo):ALL+-:ALL EXCEPT root fbx plinth (admin) (sudo):ALL+' /etc/security/access.conf however, the sed line was not correctly executed it seems, as the lines it probably should remove from access.conf were still there in my configuration. I've removed these lines, now everything is working as expected. Oh and, the sed line is supposed to remove the text, right? ;) Thanks! Dieter On 11/08/2019 17:40, James Valleroy wrote: > On 8/10/19 12:07 PM, Dieter wrote: >> in/plinth[2419]: Executing command - ['sudo', '-n', >> '/usr/share/plinth/actions/service', 'reload', 'avahi-daemon'] >> 223]: pam_access(sudo:account): access denied for user `plinth' from `' >> 223]: pam_access(sudo:account): access denied for user `plinth' from `' >> 223]: plinth : PAM account management error: Permission denied ; > Could you please check that this file exists? > > $ sudo cat /etc/sudoers.d/plinth > # > # Allow plinth user to run plinth action scripts with superuser privileges > # without needing a password. > # > plinth ALL=(ALL:ALL) NOPASSWD:/usr/share/plinth/actions/* > > # > # On FreedomBox, allow all users in the 'admin' LDAP group to execute > # commands as root. > # > %admin ALL=(root) ALL > > > _______________________________________________ > Freedombox-discuss mailing list > [email protected] > https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss
_______________________________________________ Freedombox-discuss mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss
