Re: help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Eric Smith
Adam Williamson  wrote:
> If I were you I'd just look at any app that's still using consolehelper
> and working, and copy its configuration. Shouldn't be too hard.

Makes sense.  I already have mtr-gtk installed, and it uses
consolehelper.  As it happens, it exhibits the same behavior, and uses
an identical PAM configuration, which worked in F17 but fails in F19.
(I haven't bothered to try it in F18.)  Filed bug #974334.

Now I'll look for another app that uses consolehelper.  Repoquery
shows that there are still 49 packages depending on usermode, and
presumably at least a few others use consolehelper.

> But I think it's trivial to convert an app to use PK
> as a simple 'su wrapper' too

If so, it's a shame that the polkit documentation doesn't give a
trivial example of doing exactly that.  Oh well.

Thanks!
Eric
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Adam Williamson
On Thu, 2013-06-13 at 09:21 -0600, Eric Smith wrote:
> I have no idea how it's happening, but I do seem to get another pair
> of these messages to /var/log/messages every time I click on
> gsmartcontrol in the menu.

If I were you I'd just look at any app that's still using consolehelper
and working, and copy its configuration. Shouldn't be too hard. But I
think it's trivial to convert an app to use PK as a simple 'su wrapper'
too, though the recommended thing to do is actually take advantage of
PK's power and make the app only take root privileges when it really
needs them; such a patch would obviously go upstream.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | identi.ca: adamwfedora
http://www.happyassassin.net

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Colin Walters
On Thu, 2013-06-13 at 17:18 +0200, Miloslav Trmač wrote:
> On Thu, Jun 13, 2013 at 5:10 PM, Eric Smith  
> wrote:
> > I have gsmartcontrol working with consolehelper in F17, but it fails
> > to launch in F18 and F19, and logs messages like this:
> >
> > Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: The password you typed 
> > is in\
> > valid.
> > Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: Please try again.
> "/etc/gdm/Xsession" ?!  I'm not even sure what is writing this to
> syslog 

That's the original binary executed to start the session, so systemd
captures its executable path when connecting to the journal.  Initial
change to ensure the session output goes to the journal is here:

https://bugzilla.gnome.org/show_bug.cgi?id=692308

Then later I decided /etc/gdm/Xsession was too lame to live, so:

https://bugzilla.gnome.org/show_bug.cgi?id=699785




-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Eric Smith
I have no idea how it's happening, but I do seem to get another pair
of these messages to /var/log/messages every time I click on
gsmartcontrol in the menu.

On Thu, Jun 13, 2013 at 9:19 AM, Eric Smith  wrote:
> I have no idea how it's happening, but I do seem to get another pair
> of these messages to /var/log/messages every time I click on
> gsmartcontrol in the menu.
>
> On Thu, Jun 13, 2013 at 9:18 AM, Miloslav Trmač  wrote:
>> On Thu, Jun 13, 2013 at 5:10 PM, Eric Smith  
>> wrote:
>>> I have gsmartcontrol working with consolehelper in F17, but it fails
>>> to launch in F18 and F19, and logs messages like this:
>>>
>>> Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: The password you typed 
>>> is in\
>>> valid.
>>> Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: Please try again.
>> "/etc/gdm/Xsession" ?!  I'm not even sure what is writing this to
>> syslog (userhelper would either show the message in a dialog or to
>> stderr).  Might be a red herring, or might indicate a
>> misconfiguration.
>>
>> In case it helps, this message is output based on PAM return codes
>> PAM_{AUTH_ERR,AUTHTOK_ERR,PERM_DENIED}.
>> Mirek
>> --
>> devel mailing list
>> devel@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/devel
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Miloslav Trmač
On Thu, Jun 13, 2013 at 5:10 PM, Eric Smith  wrote:
> I have gsmartcontrol working with consolehelper in F17, but it fails
> to launch in F18 and F19, and logs messages like this:
>
> Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: The password you typed is 
> in\
> valid.
> Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: Please try again.
"/etc/gdm/Xsession" ?!  I'm not even sure what is writing this to
syslog (userhelper would either show the message in a dialog or to
stderr).  Might be a red herring, or might indicate a
misconfiguration.

In case it helps, this message is output based on PAM return codes
PAM_{AUTH_ERR,AUTHTOK_ERR,PERM_DENIED}.
Mirek
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

help requested for consolehelper/pam in gsmartcontrol

2013-06-13 Thread Eric Smith
I have gsmartcontrol working with consolehelper in F17, but it fails
to launch in F18 and F19, and logs messages like this:

Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: The password you typed is in\
valid.
Jun 12 19:33:30 localhost /etc/gdm/Xsession[2594]: Please try again.

I suspect that the pam configuration in /etc/pam.d/gsmartcontrol might
need to change.  What was working in F17 was:

#%PAM-1.0
authinclude config-util
account include config-util
session include config-util

Any advice on what to do or how to debug this will be much
appreciated.  The bug is #882555.

I briefly considered trying to convert it to use polkit, but that
looks even more complicated, so if possible I'd like to stick with
consolehelper for now.

Thanks!
Eric
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel