[Pkg-libvirt-maintainers] Bug#765045: Bug#765045: Bug#765045: [libvirt-clients]

[Adrian Davey]

On 14/10/2014 13:45, Guido Günther wrote:
> On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
>> On 14/10/2014 13:10, Guido Günther wrote:
>> >On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
>> >>policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
>> >>configured libvirt to work with polkit correctly
>> >>
>> >>/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
>> >>
>> >>org.libvirt.unix.manage.pkla contains (notice the filename ending
>> >>(.pkla) as
>> >>we have polkit 0.105 in sid currently, after 0.106 the ending is not
>> >>required)
>> >>
>> >>[Allow fred libvirt management permissions]
>> >>Identity=unix-user:fred
>> >>Action=org.libvirt.unix.manage
>> >>ResultAny=yes
>> >>ResultInactive=yes
>> >>ResultActive=yes
>> >
>> >This should not be necessary if your user is in the libvirt group. Can
>> >you check?
>> >Cheers,
>> > -- Guido
>> 
>> user is in the libvirt group but without the above it fails with
>> 
>> error: failed to connect to the hypervisor
>> error: authentication failed: no agent is available to authenticate
>> 
>> changing pkla file to
>> 
>> [Allow group libvirt management permissions]
>> Identity=unix-group:libvirt
>> Action=org.libvirt.unix.manage
>> ResultAny=yes
>> ResultInactive=yes
>> ResultActive=yes
>> 
>> 
>> this works for all users in libvirt group
> 
> Is your /etc/libvirt/libvirtd.conf the default one?
>  -- Guido


apart for the commented out lines there is nothing in 
/etc/libvirt/libvirtd.conf

cat /etc/libvirt/libvirt.conf
#
# This can be used to setup URI aliases for frequently
# used connection URIs. Aliases may contain only the
# characters  a-Z, 0-9, _, -.
#
# Following the '=' may be any valid libvirt connection
# URI, including arbitrary parameters

#uri_aliases = [
#  "hail=qemu+ssh://root@hail.cloud.example.com/system",
#  "sleet=qemu+ssh://root@sleet.cloud.example.com/system",
#]

#
# This can be used to prevent probing of the hypervisor
# driver when no URI is supplied by the application.

#uri_default = "qemu:///system"


Regards,

Adrian