2009/5/18 David C. Rankin, J.D.,P.E. <drankinatty@xxxxxxxxxxxxxxxxxx>: > <match group="users"> > <return result="yes"/> > </match> I think this may be your problem. I searched some time ago and found out PolicyKit didn't support group matches. A quick look to the PolicyKit.conf(5) man page seems to confirm this is still the case. Now, I don't know if an invalid entry could invalidate the whole config, but it's worth a try. Corrado