On Wed, Jun 13, 2012 at 5:40 PM, David Zeuthen <davidz@xxxxxxxxxx> wrote: > On Wed, 2012-06-13 at 16:42 +0200, valent.turkovic@xxxxxxxxx wrote: >> On Wed, Jun 13, 2012 at 3:44 PM, valent.turkovic@xxxxxxxxx >> <valent.turkovic@xxxxxxxxx> wrote: >> > Why is Administrator type account being asked for root pasword when >> > accessing printer settings? >> > >> > Is there some user group I need to be part of? Do I need to edit some >> > system files? Are there some PolicyKit options that need to be edited? >> > How? >> > >> > Here are screenshots for printer dialog and user account: >> > http://dl.dropbox.com/u/184632/printer-root.png >> > http://dl.dropbox.com/u/184632/user-valent.png >> > >> > If you know how please share how you managed to do it, because it is >> > driving me nuts, if I'm not mistaken this is the same issue that Linus >> > Torvalds vented regarding same issue on OpenSuse - >> > https://plus.google.com/102150693225130002912/posts/1vyfmNCYpi5 >> > >> > Thanks in advance, >> > Valent. >> >> Hi David, >> maybe you can share your insight, if it is a PolicyKit issue you are >> the right person to bug, right ;) > > No. I've said this a million times, and I'll say it again: polkit is > only a mechanism and does not control the policy for individual actions > defined by applications. Even the docs, see > > http://www.freedesktop.org/software/polkit/docs/latest/polkit-apps.html > > nowadays state this > > Not interrupting console users with authentication dialogs should be > considered a priority. For example, it is not wise to require console > users to authenticate for such mundane tasks as adding a printer queue > (if the administrator really wants the OS to act this way, he can > always deploy suitable authorization rules). > > in the "best practices" section. > > If you are ever in doubt which action an authentication dialog is about, > just look at /var/log/secure after dismissing the dialog: > > Jun 13 11:35:38 lucifer polkitd(authority=local): Operator of unix-session:1 FAILED to authenticate to gain authorization for action org.opensuse.cupspkhelper.mechanism.all-edit for unix-process:1242:6289810 [gnome-control-center --overview] (owned by unix-user:davidz) > > Thus, the action is: org.opensuse.cupspkhelper.mechanism.all-edit > > Next, use 'rpm -qf' to find the package defining this action > > # rpm -qf /usr/share/polkit-1/actions/org.opensuse.cupspkhelper.mechanism.policy > cups-pk-helper-0.2.2-1.fc17.x86_64 > > and this is where you should direct your complaint. > > Hope this helps. > > David Thanks David, this helps a lot. I'm still not sure where to file a bug, do you have any suggestions? I'm running Fedora 16 and 17 - so should I file a bug for this issue to GNOME 3 guys/galls because gnome-control-center is the app asking for root password, or is this an issue in default policykit policies and should be added by default? This is what I got from the logs: Jun 13 18:23:25 valentt polkitd(authority=local): Operator of unix-session:/org/freedesktop/ConsoleKit/Session2 FAILED to authenticate to gain authorization for action org.opensuse.cupspkhelper.mechanism.all-edit for unix-process:10296:70024359 [gnome-control-center printers] (owned by unix-user:valentt) After i found "org.opensuse.cupspkhelper.mechanism.all-edit" to be keyword in this issue googling around produced these related pages/bugs: http://fedoraproject.org/wiki/Printing/ConfigurationTool https://bugzilla.redhat.com/show_bug.cgi?id=596711 [1] https://bugs.freedesktop.org/show_bug.cgi?id=41008 [2] After I figure out this issue I'll write a blog post so that other won't bother you regarding this issue. Fedora bugzilla [1] conculsion is that this is an upstream [2] bug, right? -- follow me - www.twitter.com/valentt & http://kernelreloaded.blog385.com linux, anime, spirituality, wireless, scuba, linuxmce smart home, zwave ICQ: 2125241, Skype: valent.turkovic, MSN: valent.turkovic@xxxxxxxxxxx -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
