From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp11.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id sJ38I3SH0WHtJwEAgWs5BA (envelope-from ) for ; Sun, 02 Jan 2022 12:07:32 +0100 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp11.migadu.com with LMTPS id sIFmIXSH0WFQ/gAA9RJhRA (envelope-from ) for ; Sun, 02 Jan 2022 12:07:32 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 28324CF05 for ; Sun, 2 Jan 2022 12:07:32 +0100 (CET) Received: from localhost ([::1]:35876 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1n3yi3-0001mV-5m for larch@yhetil.org; Sun, 02 Jan 2022 06:07:31 -0500 Received: from eggs.gnu.org ([209.51.188.92]:37882) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1n3yhk-0001mN-P1 for help-guix@gnu.org; Sun, 02 Jan 2022 06:07:12 -0500 Received: from jpoiret.xyz ([206.189.101.64]:38990) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1n3yhj-0003lj-8j for help-guix@gnu.org; Sun, 02 Jan 2022 06:07:12 -0500 Received: from authenticated-user (jpoiret.xyz [206.189.101.64]) by jpoiret.xyz (Postfix) with ESMTPA id 895E1184F2B; Sun, 2 Jan 2022 11:07:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=jpoiret.xyz; s=dkim; t=1641121627; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=CKm2gG1o+8dYl6zOydls8sm5fkDl0njUhpW3Ucwpaic=; b=sT3Js3OIoxaxJqlHKoBcVcL2ut8ffs5QZl1JQjUUMuy+vTaRxdM+jcy1OqarpmIATuYXJP I7nJUQ0bV7mEMlIa2bOV+NZsbBnT9Eud/cSVrtaWK9lYz9A3Qa0alRhEyAM4cXuSsl2rvF n75KsKiz0U879U5+/9kt6BTVgXN8AFrEiQtK/WEImdV3T9dJ443qK3VzYvtcsmWP3D/3iU e9EyKICC/WPTzX4WDoolznReOaT9SNU+VzshmFwLt8PSwehP5l/3CexeH5XHcWOKw1dsju FdzQFW/pPpIoUZDI9huWaS4RC/y+nY0dow7JhOAnmZUTJnvMXVfUT0TbS/I75A== From: Josselin Poiret To: Paul Jewell , raingloom Cc: help-guix@gnu.org, 52904@debbugs.gnu.org Subject: Re: bug#52904: nmtui - user authorisation In-Reply-To: References: <0f941db1-51a5-b579-7f2c-7333057cb402@teulu.org> <6404264d-e6c9-831c-9e5f-8327488201eb@teulu.org> <20211229015029.7f75bb7b@riseup.net> <20211230200023.7aec38ae@riseup.net> <878rw0fwgr.fsf@jpoiret.xyz> Date: Sun, 02 Jan 2022 12:07:05 +0100 Message-ID: <875yr2flba.fsf@jpoiret.xyz> MIME-Version: 1.0 Content-Type: text/plain X-Spamd-Bar: / Received-SPF: pass client-ip=206.189.101.64; envelope-from=dev@jpoiret.xyz; helo=jpoiret.xyz X-Spam_score_int: 23 X-Spam_score: 2.3 X-Spam_bar: ++ X-Spam_report: (2.3 / 5.0 requ) DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FROM_SUSPICIOUS_NTLD=0.499, PDS_OTHER_BAD_TLD=1.999, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: help-guix@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+larch=yhetil.org@gnu.org Sender: "Help-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1641121652; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=CKm2gG1o+8dYl6zOydls8sm5fkDl0njUhpW3Ucwpaic=; b=pHCgX5UXY3noBRv1XeUkQ7lZ5TcnLgYDU/ggkn2/9o3VL1eJtPv9xpVm1KpXFB7RqvyH5J lWdjRyY23jEo4LpZp31NLLz7rEz6/tTjD4YEkDOlibcelqQokpAIWqKLioQ6zqcBawCotv VWvPmEX3URvv3vF6RCuUK/HnRPTznjCca4RQh+jeePUB7jrQXnKhHLX1vW7rTsiOAiuL/e YNZG2AHUVCsTi09u8UOe3weP3GtKQarHg2Tj88v4EKSf1Rm6lV5TmQ7VitpdL/JkSUbopV MVwf8BNkgxJMc99LPQ8wUp0rCMl2JMs93SN5Sg7Zgzxy7/yJpLykrNtMP8G+Yw== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1641121652; a=rsa-sha256; cv=none; b=AteRqeOHGXuYT/1TuKv8I14gwcdG5yzzPMHxXmvQb6+OlseNrN4TZzK7UF4lo3awKsBXhe kuprHkJedqfRQctQxyEJTLmLXwtz4oQSoe+fud6/ZeyyY4b1yNvySkyytmvIRL04Yn2oWh r27Mxex9DqELpqN34LoZXNzNBkAKksgwMcC7zjszl75YOpsm4vQC2/W7T1vmMC0JA/AImk tV0tJD7Ir853J3SOLBuUTZHWO7kItLdB+P+alp4TBtemHK832qCfzM41N/IXPOI5LW9AY6 51RnTB9524EtC/uhq6ivFSltA7fg7moy0vxm2ZLgP55jzouAJEj+dyF2q3lqgQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=sT3Js3OI; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -4.28 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=jpoiret.xyz header.s=dkim header.b=sT3Js3OI; dmarc=pass (policy=reject) header.from=jpoiret.xyz; spf=pass (aspmx1.migadu.com: domain of "help-guix-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="help-guix-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 28324CF05 X-Spam-Score: -4.28 X-Migadu-Scanner: scn1.migadu.com X-TUID: cICRvEHmpGny Hello again, > Good morning Josselin, and Happy New Year! > > Many thanks for taking the time to explain this in detail for us. If I > have properly understood your explanation, it suggests I am running > network-manager from outside of the dbus session. If I look at the > processes running on my system at this moment, the dbus-launch process > has an id of 881, while the network-manager session has an id of 463, > suggesting that it was started before dbus. My system configuration is > relatively standard (if there is such a thing) - I don't do anything to > change how dbus or network manager are launched, but rely on the > defaults provided by the the desktop-service. Is there any way to ensure > network-manager is launched inside the dbus session? I am using slim > rather than gdm, and as a desktop manager I am using dwm (with some > local changes). > > Regarding the wheel group - my user is in this group, but I don't get > any request for a password - nmtui simply informs me that I don't have > the necessary authorisation. Some context is missing from the forwarded mail, so I have no idea what script you're trying to run or how, unfortunately. Here is some more information though: * there are generally two (or more) dbus daemons running. One for the system bus, launched through Shepherd (named `dbus-system`), and one for each session, for the session bus, started either manually or often through your DM (ie. GDM). elogind and NetworkManager both run on the system bus. * for Polkit to successfully reauthenticate you, it needs to have a registered agent running. A Polkit agent is a program that registers with Polkit via dbus, is associated with a session, and is used by Polkit to prompt the user for a password. There are many, see [1]. You can test whether the agent is properly set-up by simply running `pkexec echo "Hello"`, pkexec being roughly the equivalent of `sudo`, but using Polkit for permission checking. [1] https://wiki.archlinux.org/title/Polkit#Authentication_agents -- Josselin Poiret