Bug 849990

Summary: Apper: Authentization failed when trying to install updates
Product: [Fedora] Fedora Reporter: Martin Krizek <mkrizek>
Component: polkitAssignee: David Zeuthen <davidz>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 18CC: awilliam, davidz, hughsient, jreznik, kevin, ltinkl, mclasen, rdieter, rh-bugzilla, rnovacek, robatino, smparrish, than
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-29 17:29:13 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
screenshot none

Description Martin Krizek 2012-08-21 12:34:09 UTC
Created attachment 605926 [details]
screenshot

Description of problem:
Installed Fedora 18 x86_64 with KDE in KVM. I had to chroot to the installation and manually set root password and then create a user. I run Apper and tried to apply updates but got the following error (also attaching screenshot): "You have failed to provide correct authentification. Please check any passwords or account settings.". Note, that I have not been asked for root password. Installation via "yum update" works flawlessly.

Version-Release number of selected component (if applicable):
apper-0.8.0-0.4.20120724git.fc18.x86_64

How reproducible:
Always

Comment 1 Martin Krizek 2012-08-21 12:37:00 UTC
I am proposing this as an Alpha blocker per criterion: "The installed system must be able to download and install updates with yum and the default graphical package manager in all release-blocking desktops.".

Comment 2 Rex Dieter 2012-08-21 15:14:16 UTC
hoping  bug #829881 is the root cause of this, and fixing that helps here.  we'll find out

Comment 3 Rex Dieter 2012-08-21 15:18:22 UTC
looks like bug #841451 is a better candidate.

Comment 4 Kevin Kofler 2012-08-21 15:20:14 UTC
#829881 is not the same issue. We have only one .pkla file and that's for setting the clock.

Comment 5 Adam Williamson 2012-08-21 23:07:27 UTC
+1 blocker, per criterion cited in comment #1.

Comment 6 Adam Williamson 2012-08-21 23:14:28 UTC
rex: I'm not sure it'd be 841451. We currently believe that issue affects only yum updates from f17 to f18. on a fresh install, polkit appears to work correctly. we're not 100% sure of it yet, but that's my current belief. martin, can you verify whether polkit is running and the polkitd user is correctly created?

Comment 7 Martin Krizek 2012-08-22 12:09:15 UTC
Sure, polkit is running, the polkitd user is created as following:
polkitd:x:999:999:User for polkitd:/:/sbin/nologin

Comment 8 Adam Williamson 2012-08-22 17:19:51 UTC
Discussed at 2012-08-22 blocker review meeting. Accepted as a blocker per criterion "The installed system must be able to download and install updates with yum and the default graphical package manager in all release-blocking desktops", for the KDE desktop. We don't believe this is a case of #841451, as per comment #7 - polkit is running correctly, but Apper isn't talking to it somehow.

Comment 9 Martin Kho 2012-08-23 07:37:19 UTC
Hi,

FWIW, Yesterday updating my distro-sync'd fc18 - upgraded from fc17 - with Apper - apper-0.8.0-0.4.20120724git.fc18.x86_64 - went without a problem. 

1) With respect to comment #2: bug #829881 seems indeed not to be the cause. /var/lib/polkit-1/localauthority/10-vendor.d/ still contains 11-fedora-kde-policy.pkla.

2) Polkit is active - /usr/lib/polkit-1/polkitd --no-debug
and  /usr/libexec/kde4/polkit-kde-authentication-agent-1

So it looks to me more an installation / configuration issue. Missing dependencies or changed configuration Fedora specific not KDE?


Hope this helps,

Martin Kho

BTW: User - me - is in the wheel - sudoers - group and I run selinux in permissive mode.

Comment 10 Jaroslav Reznik 2012-08-29 15:18:42 UTC
Seems like a change in Polkit 0.107 behaviour - I don't see a request in log. Reassigning to polkit-kde.

Comment 11 Jaroslav Reznik 2012-08-29 16:01:52 UTC
Well, it seems even with Gnome Auth Agent I'm unable to authenificate - for both KDE/Gnome agents dialog poups and it's dismissed, authorization fails. Let's try polkit.

Comment 12 Jaroslav Reznik 2012-08-29 16:04:43 UTC
From polkitd - 12:02:28.213: Operator of unix-session:6 FAILED to authenticate to gain authorization for action org.freedesktop.policykit.exec for unix-process:6334:1322118 [/bin/bash] (owned by unix-user:jreznik)

Comment 13 Adam Williamson 2012-08-29 17:29:13 UTC
Turns out this and 852403 are dupes. That one is the cleaner bug, so we're marking this as the dupe and transferring blocker status to that bug.

*** This bug has been marked as a duplicate of bug 852403 ***