On 14/10/2014 13:45, Guido Günther wrote:
On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
On 14/10/2014 13:10, Guido Günther wrote:
On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
configured libvirt to work with polkit correctly
/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
org.libvirt.unix.manage.pkla contains (notice the filename ending
(.pkla) as
we have polkit 0.105 in sid currently, after 0.106 the ending is not
required)
[Allow fred libvirt management permissions]
Identity=unix-user:fred
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes
This should not be necessary if your user is in the libvirt group. Can
you check?
Cheers,
-- Guido
user is in the libvirt group but without the above it fails with
error: failed to connect to the hypervisor
error: authentication failed: no agent is available to authenticate
changing pkla file to
[Allow group libvirt management permissions]
Identity=unix-group:libvirt
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes
this works for all users in libvirt group
Is your /etc/libvirt/libvirtd.conf the default one?
-- Guido
apart for the commented out lines there is nothing in
/etc/libvirt/libvirtd.conf
cat /etc/libvirt/libvirt.conf
#
# This can be used to setup URI aliases for frequently
# used connection URIs. Aliases may contain only the
# characters a-Z, 0-9, _, -.
#
# Following the '=' may be any valid libvirt connection
# URI, including arbitrary parameters
#uri_aliases = [
# hail=qemu+ssh://r...@hail.cloud.example.com/system,
# sleet=qemu+ssh://r...@sleet.cloud.example.com/system,
#]
#
# This can be used to prevent probing of the hypervisor
# driver when no URI is supplied by the application.
#uri_default = qemu:///system
Regards,
Adrian
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
