Bug#855272: systemd: policykit does not show TUI for remote logins

[Ritesh Raj Sarraf]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hello Michael,

On Thu, 2017-02-16 at 17:44 +0100, Michael Biebl wrote:
> > ***********************************************************
> > rrs at chutzpah:~$ echo $DISPLAY
> > localhost:10.0
> > 14:22 ______   _    
> 
> 
> If that is set, do you have X forwarding enabled over ssh?
> 

For this host, yes. It is enabled. I also noticed that it was disabled for the
other host (pi).

After disabling X11 forwarding, I was able to get the proper prompt.

rrs at chutzpah:~$ machinectl login fitbit
==== AUTHENTICATING FOR org.freedesktop.machine1.login ===
Authentication is required to log into a local container.
Authenticating as: Ritesh Raj Sarraf,,, (rrs)
Password:
==== AUTHENTICATION COMPLETE ===
Connected to machine fitbit. Press ^] three times within 1s to exit session.

Debian GNU/Linux 9 fitbit pts/0

fitbit login:



So, there are 2 weird behavior I see.

1. When X11 forwarding is enabled, it shows the policykit prompt on gdm display
server. And even with the gdm screen locked, one can still feed in the password
there.

2. systemd should detect remote sessions and use the terminal user interface.

> What does systemctl (--user) show-environment show?

rrs at chutzpah:~$ systemctl --user show-environment > /var/tmp/show-env
BYOBU_ACCENT=\#75507B
BYOBU_BACKEND=tmux
BYOBU_CONFIG_DIR=/home/rrs/.byobu
BYOBU_DARK=\#333333
BYOBU_DATE=%Y-%m-%d 
BYOBU_DISTRO=Debian GNU/Linux
BYOBU_HIGHLIGHT=\#DD4814
BYOBU_LIGHT=\#EEEEEE
BYOBU_PAGER=sensible-pager
BYOBU_PREFIX=/usr
BYOBU_PYTHON=python2
BYOBU_READLINK=readlink
BYOBU_RUN_DIR=/dev/shm/byobu-rrs-n53BE4Gi
BYOBU_SED=sed
BYOBU_TIME=%H:%M:%S
BYOBU_ULIMIT=ulimit
BYOBU_WINDOW_NAME=-
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus
DESKTOP_SESSION=gnome
DISPLAY=:0
GDMSESSION=gnome
GDM_LANG=en_IN
GNOME_DESKTOP_SESSION_ID=this-is-deprecated
GPG_AGENT_INFO=/run/user/1000/gnupg/S.gpg-agent:0:1
GTK_MODULES=gail:atk-bridge
HOME=/home/rrs
JOURNAL_STREAM=8:25974
LANG=en_IN
LANGUAGE=en_IN:en
LOGNAME=rrs
PATH=/home/rrs/bin:/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games
PWD=/home/rrs
QT_ACCESSIBILITY=1
QT_IM_MODULE=ibus
QT_LINUX_ACCESSIBILITY_ALWAYS_ON=1
QT_QPA_PLATFORMTHEME=qgnomeplatform
SESSION_MANAGER=local/chutzpah:@/tmp/.ICE-unix/7611,unix/chutzpah:/tmp/.ICE-
unix/7611
SHELL=/bin/bash
SSH_AGENT_PID=7676
SSH_AUTH_SOCK=/run/user/1000/keyring/ssh
USER=rrs
USERNAME=rrs
WINDOWPATH=2
XAUTHORITY=/run/user/1000/gdm/Xauthority
XDG_CURRENT_DESKTOP=GNOME
XDG_DATA_DIRS=/usr/share/gnome:/home/rrs/.local/share/flatpak/exports/share/:/va
r/lib/flatpak/exports/share/:/usr/local/share/:/usr/share/
XDG_MENU_PREFIX=gnome-
XDG_RUNTIME_DIR=/run/user/1000
XDG_SEAT=seat0
XDG_SESSION_DESKTOP=gnome
XDG_SESSION_ID=19
XDG_SESSION_TYPE=x11
XDG_VTNR=2
XMODIFIERS=@im=ibus
22:28 ♒♒♒   ☺    


and 


rrs at chutzpah:~$ systemctl show-environment
LANG=en_IN
LANGUAGE=en_IN:en
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
22:30 ♒♒♒   ☺    


- -- 
Ritesh Raj Sarraf | http://people.debian.org/~rrs
Debian - The Universal Operating System
-----BEGIN PGP SIGNATURE-----
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=RplD
-----END PGP SIGNATURE-----