[Pkg-libvirt-maintainers] Bug#765045: Bug#765045: [libvirt-clients]

[Adrian Davey]

On 14/10/2014 13:10, Guido Günther wrote:
> On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
>> policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to 
>> have
>> configured libvirt to work with polkit correctly
>> 
>> /etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
>> 
>> org.libvirt.unix.manage.pkla contains (notice the filename ending 
>> (.pkla) as
>> we have polkit 0.105 in sid currently, after 0.106 the ending is not
>> required)
>> 
>> [Allow fred libvirt management permissions]
>> Identity=unix-user:fred
>> Action=org.libvirt.unix.manage
>> ResultAny=yes
>> ResultInactive=yes
>> ResultActive=yes
> 
> This should not be necessary if your user is in the libvirt group. Can
> you check?
> Cheers,
>  -- Guido

user is in the libvirt group but without the above it fails with

error: failed to connect to the hypervisor
error: authentication failed: no agent is available to authenticate

changing pkla file to

[Allow group libvirt management permissions]
Identity=unix-group:libvirt
Action=org.libvirt.unix.manage
ResultAny=yes
ResultInactive=yes
ResultActive=yes


this works for all users in libvirt group

Regards,

Adrian