[Pkg-utopia-maintainers] Bug#826945: policykit-1: pkaction exits with an authentication error for LDAP users instead of listing actions

[pab@bee]

Package: policykit-1
Version: 0.105-8
Severity: important

Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***

Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: "pab at bee" <p.brettner at bee.de>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: policykit-1: pkaction authentication error for users not listed in
 /etc/passwd
Message-ID: <20160610110550.2230.44657.reportbug at tc-02-iv7.do.bee.de>
X-Mailer: reportbug 6.6.3
Date: Fri, 10 Jun 2016 13:05:50 +0200

Package: policykit-1
Version: 0.105-8
Severity: important

Dear Maintainer,

when trying to use any policykit dependend actions like shutdown/reboot or automount in Xfce4 it does not work for LDAP users
but for local users. The command "pkaction" shows the following error for that particular user:
----------
Error getting authority: Error initializing authority: Exhausted all available authentication mechanisms (tried: EXTERNAL, DBUS_COOKIE_SHA1, ANONYMOUS) (available: EXTERNAL, DBUS_COOKIE_SHA1, ANONYMOUS)
----------
For local users it just lists available actions.

Found Workaround:
If I add the LDAP-User to /etc/passwd (e.g execute "getent passwd specific_ldap_user >> /etc/passwd" for the specific_ldap_user), pkaction begins to work instantly.
After a relog to the XFCE4-Session the Logout options shutdown/reboot/suspend/hibernate are all available and working.


We would like a real solution because the workaround can not be applied dynamically while logging in a user to desktop so it would be nice if this would work out of the box.

Additional infos: NSCD is not used only nslcd and libpam-ldapd.


Kind regards!
Pasqual Brettner
bee GmbH Dortmund

-- System Information:
Debian Release: 8.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages policykit-1 depends on:
ii  dbus                   1.8.20-0+deb8u1
ii  libc6                  2.19-18+deb8u4
ii  libglib2.0-0           2.42.1-1+b1
ii  libpam-systemd         215-17+deb8u4
ii  libpam0g               1.1.8-3.1+deb8u1+b1
ii  libpolkit-agent-1-0    0.105-8
ii  libpolkit-backend-1-0  0.105-8
ii  libpolkit-gobject-1-0  0.105-8

policykit-1 recommends no packages.

policykit-1 suggests no packages.

-- no debconf information

-- System Information:
Debian Release: 8.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages policykit-1 depends on:
ii  dbus                   1.8.20-0+deb8u1
ii  libc6                  2.19-18+deb8u4
ii  libglib2.0-0           2.42.1-1+b1
ii  libpam-systemd         215-17+deb8u4
ii  libpam0g               1.1.8-3.1+deb8u1+b1
ii  libpolkit-agent-1-0    0.105-8
ii  libpolkit-backend-1-0  0.105-8
ii  libpolkit-gobject-1-0  0.105-8

policykit-1 recommends no packages.

policykit-1 suggests no packages.

-- no debconf information