[SOLVED] Fri Oct 1 00:21:20 UTC 2021 -current

rherbert · 10-01-2021, 01:53 PM

Since installing last night's update to -current, kdesu is no longer authenticating the user.

I found a broken symlink in /usr/bin/ and corrected it to point to the new location of kdesu, as well as creating symlinks for kdesud and kdesu_stub in order to quell errors I saw when launching kdesu in a terminal (where kdesu actually *does* work). It only seems to be borked in the DE. I tried reinstalling the kdesu package, but all that does is re-create the broken symlink. Is it only me?

Thanks.

LuckyCyborg · 10-01-2021, 02:03 PM

I confirm that the /usr/bin/kdesu symlink points to /usr/lib64/kf5/kdesu instead of current correct location: /usr/lib64/libexec/kf5/kdesu

Franklin · 10-02-2021, 09:00 AM

10/2 update to -current does not appear to have fixed this (though the broken symlink has been fixed). kdesu does not recognize the root password from my normal user or test login. When run from the terminal in KDE:

Code:

test@slackbox:~$ kdesu dolphin
kf.su: kdesud daemon not found.
org.kde.kdesu: Daemon not safe (not sgid), not using it.

I'm presented with the dialogue box to enter the root passowrd, but it fails. Root password seems to be recognized everywhere else.

marco70 · 10-02-2021, 10:00 AM

https://www.linuxquestions.org/quest...ml#post6288197

Franklin · 10-02-2021, 10:32 AM

Thanks Marco70. Can confirm:

Quote:

The problem is still with the kdesu_stub
Only works when it is in the directory /usr/lib64/kf5

rherbert · 10-02-2021, 12:11 PM

Thanks marco70, Franklin, and of course, Pat.

Quote:

The problem is still with the kdesu_stub
Only works when it is in the directory /usr/lib64/kf5

As a workaround, I created and dove into the directory /usr/lib64/kf5/, and then created a symlink to /usr/lib64/libexec/kf5/kdesu_stub. As a result, kdesu now authenticates root.

Franklin · 10-02-2021, 04:24 PM

The latest update (10/2 #2) fixes this for me.

rherbert · 10-02-2021, 10:46 PM

Quote:

The latest update (10/2 #2) fixes this for me.

Here too. :-)

Thanks guys. Marking thread solved.

marav · 10-04-2021, 05:58 AM

I am using this thread to share an observation (which may not be the case for everyone):

I added kdesu in the application launcher for gparted and partitionmanager
"command" :
gparted --> kdesu gparted
partitionmanager --> kdesu partitionmanager

as a result,
- gparted launches correctly
- and in : info center / devices / "smart" state / partitionmanager
I don't get this error anymore:

Code:

QDBusError("org.freedesktop.DBus.Error.AccessDenied", "")

and asks for a password

ctrlaltca · 10-04-2021, 06:38 AM

Quote:

Originally Posted by marav

I am using this thread to share an observation (which may not be the case for everyone):

I added kdesu in the application launcher for gparted and partitionmanager
"command" :
gparted --> kdesu gparted
partitionmanager --> kdesu partitionmanager

GParted should already try to run as root and ask for a password.
If you take a look at /usr/bin/gparted, it's a shell script that uses pkexec to run /usr/libexec/gpartedbin (the real executable) as root.

Partitiomanager instead should run as a normal user, but use kauth when needed to to run specific commands as root.
Under wayland this can be confusing because sometimes the policykit dialog asking for the root password appears behind the main application window.

LuckyCyborg · 10-04-2021, 06:53 AM

I believe that there is still an issue on the /etc/profile.d scripts of Plasma5.

Code:

# Add KDE paths if they exist:
if [ -d /usr/lib64/kf5 ]; then
  PATH="$PATH:/usr/lib64/libexec/kf5"
fi

I do not understand the point of checking a particular directory existence, then adding another and entire different directory to the $PATH ...

And, in fact this check should return false, because /usr/lib64/kf5 is today a symlink, not a directory.

Probably there's a bug on coreutils or whatever, which makes this logic to still work.

LuckyCyborg · 10-04-2021, 06:53 AM

I believe that there is still an issue on the /etc/profile.d scripts of Plasma5.

Code:

# Add KDE paths if they exist:
if [ -d /usr/lib64/kf5 ]; then
  PATH="$PATH:/usr/lib64/libexec/kf5"
fi

I do not understand the point of checking a particular directory existence, then adding another and entire different directory to the $PATH ...

And, in fact this check should return false, because /usr/lib64/kf5 is today a symlink, not a directory.

Probably there's a bug on coreutils or whatever, which makes this logic to still work.

ctrlaltca · 10-04-2021, 07:38 AM

Quote:

Originally Posted by LuckyCyborg

I believe that there is still an issue on the /etc/profile.d scripts of Plasma5.

Nice catch!

Quote:

Originally Posted by LuckyCyborg

Probably there's a bug on coreutils or whatever, which makes this logic to still work.

From the "test" man page:

Code:

Except  for  -h and -L, all FILE-related tests dereference symbolic links.

marav · 10-04-2021, 07:39 AM

Quote:

Originally Posted by ctrlaltca

GParted should already try to run as root and ask for a password.
If you take a look at /usr/bin/gparted, it's a shell script that uses pkexec to run /usr/libexec/gpartedbin (the real executable) as root.

Partitiomanager instead should run as a normal user, but use kauth when needed to to run specific commands as root.
Under wayland this can be confusing because sometimes the policykit dialog asking for the root password appears behind the main application window.

if I don't have kdesu a the beginnig of the command, it gives me this error, in /var/log/secure :

Code:

secure:Oct  4 12:18:43 blackstar pkexec[5110]: marav: Error executing command as another user: Not authorized [USER=root] 
[TTY=/dev/pts/3] [CWD=/home/marav] [COMMAND=/usr/bin/gparted]

I see the window of kdesu appearing, but it closes immediately

ctrlaltca · 10-04-2021, 08:33 AM

It seems to work here, from secure:

Code:

Oct  4 15:29:28 sprawl polkitd[4313]: Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.gnome.gparted for unix-process:18421:27652872 [/bin/sh /usr/bin/gparted] (owned by unix-user:fabio)

Do you have polkitd and polkit-kde-authentication-agent-1 running?
Do you have a /usr/share/polkit-1/actions/org.gnome.gparted.policy file?

Can you check the contents of ~/.local/share/sddm/wayland-session.log (or xorg-session.log) while running it?
This is what i see here:

Quote:

polkit_qt_listener_initiate_authentication callback for 0x8f8000
Initiating authentication
Message of action: "È richiesto autenticarsi per eseguire «Editor di partizioni GParted» come root"
Action description has been found
WinId of the dialog is 14680159 14680159
WinId of the shown dialog is 14680159 14680159
Trying again
REQUEST
Request: "Password: "
"Password: "
Dialog accepted
COMPLETED
Completed: true
Finishing obtaining privileges
Listener adapter polkit_qt_listener_initiate_authentication_finish
polkit_qt_listener_initiate_authentication_finish callback for 0x8f8000

marav · 10-04-2021, 09:20 AM

Quote:

Originally Posted by ctrlaltca

It seems to work here, from secure:

Code:

Oct  4 15:29:28 sprawl polkitd[4313]: Operator of unix-session:1 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.gnome.gparted for unix-process:18421:27652872 [/bin/sh /usr/bin/gparted] (owned by unix-user:fabio)

Do you have polkitd and polkit-kde-authentication-agent-1 running?
Do you have a /usr/share/polkit-1/actions/org.gnome.gparted.policy file?

Can you check the contents of ~/.local/share/sddm/wayland-session.log (or xorg-session.log) while running it?
This is what i see here:

Thx for the leads

Code:

Error:  "Incorrect permissions on /usr/lib/polkit-1/polkit-agent-helper-1 (needs to be setuid root)"

fixed with :

Code:

$ chmod +s /usr/lib/polkit-1/polkit-agent-helper-1