[Pkg-libvirt-maintainers] Bug#765045: Bug#765045: Bug#765045: [libvirt-clients]

Guido Günther agx at sigxcpu.org
Tue Oct 14 12:45:43 UTC 2014


On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
> On 14/10/2014 13:10, Guido Günther wrote:
> >On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
> >>policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
> >>configured libvirt to work with polkit correctly
> >>
> >>/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
> >>
> >>org.libvirt.unix.manage.pkla contains (notice the filename ending
> >>(.pkla) as
> >>we have polkit 0.105 in sid currently, after 0.106 the ending is not
> >>required)
> >>
> >>[Allow fred libvirt management permissions]
> >>Identity=unix-user:fred
> >>Action=org.libvirt.unix.manage
> >>ResultAny=yes
> >>ResultInactive=yes
> >>ResultActive=yes
> >
> >This should not be necessary if your user is in the libvirt group. Can
> >you check?
> >Cheers,
> > -- Guido
> 
> user is in the libvirt group but without the above it fails with
> 
> error: failed to connect to the hypervisor
> error: authentication failed: no agent is available to authenticate
> 
> changing pkla file to
> 
> [Allow group libvirt management permissions]
> Identity=unix-group:libvirt
> Action=org.libvirt.unix.manage
> ResultAny=yes
> ResultInactive=yes
> ResultActive=yes
> 
> 
> this works for all users in libvirt group

Is your /etc/libvirt/libvirtd.conf the default one?
 -- Guido



More information about the Pkg-libvirt-maintainers mailing list