Re: [Ltsp-discuss] Edit user accounts from clients on Karmic / policykit-1

[Jakob Unterwurzacher]

Am 2010-02-19 08:57, schrieb Jussi P:
I get this:
isoju...@kantti-ltsp:~$ dpkg --get-selections | grep policykit
policykit                                       install
[...]
Same for me.

Ok, now. When you klick the unlock button (the one that is greyed out 
when connecting remotely) you get a dialog (screenshot attached).
The "action" there is org.freedesktop.systemtoolsbackends.set .

This

$ pkaction --verbose --action-id org.freedesktop.systemtoolsbackends.set

org.freedesktop.systemtoolsbackends.set:
   description:       Manage system configuration
   message:           System policy prevents modifying the system 
configuration
   vendor:
   vendor_url:
   icon:
   implicit any:      no
   implicit inactive: no
   implicit active:   auth_admin_keep

gives some info about this action and the description looks like it's 
the right one.

What remains to be done is to find out how to allow this action for 
remote users. I don't have the time to do this at the moment, but i 
think it's not too difficult.

Actually, i think i found the file this is defined in:
/usr/share/polkit-1/actions/org.freedesktop.SystemToolsBackends.policy

Looking at the file and
http://hal.freedesktop.org/docs/polkit/polkit.8.html
adding the line

<allow_any>auth_self</allow_any>

after <allow_active>auth_self</allow_active> looks primising.


Jakob

<<attachment: screenshot.png>>------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net