[Pkg-libvirt-maintainers] Bug#765045: Bug#765045: Bug#765045: [libvirt-clients]
Guido Günther
agx at sigxcpu.org
Tue Oct 14 12:45:43 UTC 2014
On Tue, Oct 14, 2014 at 01:38:23PM +0100, Adrian Davey wrote:
> On 14/10/2014 13:10, Guido Günther wrote:
> >On Tue, Oct 14, 2014 at 10:17:18AM +0100, Adrian Davey wrote:
> >>policykit-1 and libpolkit-agent-1-0 from sid work fine, you need to have
> >>configured libvirt to work with polkit correctly
> >>
> >>/etc/polkit-1/localauthority/50-local.d/ with polkit config files eg;
> >>
> >>org.libvirt.unix.manage.pkla contains (notice the filename ending
> >>(.pkla) as
> >>we have polkit 0.105 in sid currently, after 0.106 the ending is not
> >>required)
> >>
> >>[Allow fred libvirt management permissions]
> >>Identity=unix-user:fred
> >>Action=org.libvirt.unix.manage
> >>ResultAny=yes
> >>ResultInactive=yes
> >>ResultActive=yes
> >
> >This should not be necessary if your user is in the libvirt group. Can
> >you check?
> >Cheers,
> > -- Guido
>
> user is in the libvirt group but without the above it fails with
>
> error: failed to connect to the hypervisor
> error: authentication failed: no agent is available to authenticate
>
> changing pkla file to
>
> [Allow group libvirt management permissions]
> Identity=unix-group:libvirt
> Action=org.libvirt.unix.manage
> ResultAny=yes
> ResultInactive=yes
> ResultActive=yes
>
>
> this works for all users in libvirt group
Is your /etc/libvirt/libvirtd.conf the default one?
-- Guido
More information about the Pkg-libvirt-maintainers
mailing list