Jehan Procaccia wrote:
Le 04/09/2013 17:08, Bill Davidsen a écrit :
Jehan PROCACCIA wrote:
hello,
I've got hundred of fedora19 station installed on computer lab for our
students.
these are self service multi-user stations, users needs to restart the station
whenever they want to
unfortunatly apparently "polkit" prevents them to restart when another user is
(or had been ?) connected .
I know it is a safe behavior, but we defenitively want to enable users to
restart the station themself whenever they want to, but without requiring the
root password !
indeed, often student leave the room without disconecting (bad !) , then the
screen locks but still allows someone else to connect, but that second student
then cannot restart :-( .
I've tried lot of things:
http://askubuntu.com/questions/1190/how-can-i-make-shutdown-not-require-admin-password
apparently .pkla files a deprecated , and I confirmed that creating a
/etc/polkit-1/localauthority/50-local.d/allow_all_users_to_restart.pkla
containi
ng Action=org.freedesktop.consolekit.system.restart-multiple-users
AllowActive=yes doesn't work
then, from #fedora IRC I've been proposed to create rules in
/etc/polkit-1/rules.d :
http://paste.fedoraproject.org/36844/
[root@b06-02 rules.d]# cat 00-early-checks.rules
/* Allow shutdown when others are logged in */
polkit.addRule(function(action, subject) {
if (action.id ==
"org.freedesktop.consolekit.system.stop-multiple-users" ||
action.id ==
"org.freedesktop.consolekit.system.restart-multiple-users") {
return polkit.Result.YES;
}
});
it still fails, when user click on their username on the top right corner of
the
gnome-session, schroll down to shutdown, then click restart, a window appears
warning that there are other user conencted and that "authentification is
required for rebooting the system while other users are logged in", and
ends by
asking to enter the "Administrator" password :-(
Where can I remove that "feature" ?
1 - Do the students ever have to initiate a long running job and wait for
results? If so, having someone else reboot the machine is not desirable.
2 - It might be better to just log out idle users.
3 - However, if it is your intention to let any user reboot at any time, use
visudo to add a line:
%booters ALL=(ALL) NOPASSWD: /sbin/reboot
so the next student could log in and reboot from command line with
sudo su /sbin/reboot
Note that this requires putting all students allowed to do this (all of
them?) into a secondary group allowed to reboot.
My though is that there is a reason why this isn't the default, if there is
no legitimate use which justifies not rebooting, you certainly can do that.
In particular, you probably don't want people logging in remotely and just
rebooting the machine, students have been known to prank one another.
unfortunatly , some user never use a terminal and would'nt know how to use a
command line as "sudo su /sbin/reboot"
the purpose here was to enable restart from the drop down menu withing the
gnome session .
as ahmad samir replied earlier, I have the solution with setting this:
[root@b06-01 ~]# cat /etc/polkit-1/rules.d/00-early-checks.rules
/* Allow shutdown when others are logged in */
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.login1.reboot-multiple-sessions" ||
action.id == "org.freedesktop.login1.power-off-multiple-sessions") {
return polkit.Result.YES;
}
});
thanks .
Actually command lines are specified in menu items and icons...
--
Bill Davidsen <david...@tmr.com>
"'Nothing to hide' does not imply 'nothing to fear'"
- me
"AT&T could not seriously contend that a reasonable entity in its position
could have believed that the alleged domestic dragnet was legal."
-judge Vaughn R. Walker of the U.S. District Court
for the Northern District of California, EFF vs. AT&T
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
