Bug 397805

Summary: Failed to update system: Authorisation could not be obtained
Product: [openSUSE] openSUSE 11.0 Reporter: Jags FL <Jags_FL>
Component: Update ProblemsAssignee: Scott Reeves <sreeves>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Critical    
Priority: P2 - High CC: cooperfan, djf8e, dtd33inc, fdan52, Jags_FL, jpschewe, massou, syl-novell-mji
Version: Final   
Target Milestone: ---   
Hardware: 64bit   
OS: openSUSE 11.0   
Whiteboard:
Found By: Beta-Customer Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Jags FL 2008-06-06 06:43:26 UTC
Even after log-in as a root user, when I tries to install update by clicking 'Green Star icon' in system tray / automatic update, I get this message :

Failed to update system: Authorisation could not be obtained

- Jags
Comment 1 Thomas Göttlicher 2008-06-06 08:43:02 UTC
Are you using Gnome or KDE?
Comment 2 Jags FL 2008-06-06 10:00:38 UTC
I'm using Gnome 2.22

- Jags
Comment 3 Thomas Göttlicher 2008-06-06 10:05:52 UTC
Reassigning to the gnome maintainers.
Comment 4 JP Rosevear 2008-06-06 14:51:38 UTC
I assume you installed from DVD?  Do:


 ls -ald /var/run/PolicyKit/
Comment 5 Jags FL 2008-06-07 00:41:08 UTC
hi 'JP Rosevear'

Its a Net installation of OpenSUSE 11.0 RC1 but before this I had installed it from DVD and I was getting the same error.

Here is the output of ' ls -ald /var/run/PolicyKit/ ' :


drwxrwx--- 2 polkituser polkituser 4096 2008-06-03 08:22 /var/run/PolicyKit/

- Jags
Comment 6 Velislav Stoychev 2008-06-20 18:27:57 UTC
I have exactly the same problem on OpenSUSE 11 final 64 bit. When I try to update from the console and start 

zypper update 

with root, the output is: "A ZYpp transaction is already in progress. This means, there is another application using the libzypp library for package management running. All such applications must be closed before using this command."

lsof | grep libzypp
lsof: WARNING: can't stat() fuse.gvfs-fuse-daemon file system /var/lib/gdm/.gvfs
      Output information may be incomplete.
packageki  9273       root  mem       REG                8,2  3880312      10395 /usr/lib64/libzypp.so.424.2.4


killall packagekitd && zypper update

install the critical updates but is not a solution.










Comment 7 Jean Marc Massou 2008-06-28 12:32:31 UTC
killall packagekitd && zypper update

do the trick for critical, but i have the same problem with regular update by the 'green star icon" yellow actually...
try to add my user to polkituser group no effect...
Comment 8 JP Rosevear 2008-07-02 19:31:44 UTC
Assuming you are on GNOME, is PolicyKit-gnome installed?  Did you install from the media?

Also please report the output of  "grep PERM /etc/sysconfig/security"
Comment 9 Marc Christensen 2008-07-02 20:02:11 UTC
This also happens to me on a openSUSE 11 x86_64 but only when updating using the tray icon as root.  I can update using yast2 directly or using the tray icon as a normal user.  It's only when I'm root and trying to update using the try icon that I get the error.
Comment 10 Jon Schewe 2008-07-04 02:21:51 UTC
(In reply to comment #8 from JP Rosevear)
> Assuming you are on GNOME, is PolicyKit-gnome installed?  Did you install from
> the media?
I installed from the Net, just using the network boot cd and have the same problem.
 
jpschewe@jon:~
>rpm -qa | grep -i policy
PolicyKit-doc-0.8-17.1
PolicyKit-kde-0.0.svn810196-5.1
PolicyKit-gnome-libs-0.8-4.1
PolicyKit-0.8-14.1

> Also please report the output of  "grep PERM /etc/sysconfig/security"
> 
jpschewe@jon:~
>grep PERM /etc/sysconfig/security
CHECK_PERMISSIONS="set"
PERMISSION_SECURITY="easy local"

Comment 11 JP Rosevear 2008-07-04 13:29:39 UTC
Try installing the package 'PolicyKit-gnome'
Comment 12 Jon Schewe 2008-07-04 15:40:03 UTC
Works just fine now. It'd be nice if that got installed by default.
Comment 13 Luuk de Waal Malefijt 2008-07-20 10:51:43 UTC
I still have the problem. Installing Policykit-gnome didnt work for me.
Comment 14 JP Rosevear 2008-07-21 20:54:41 UTC
PolicyKit-gnome is installed from a live cd or dvd.
Comment 15 Luuk de Waal Malefijt 2008-07-21 22:56:57 UTC
I meant that the installation succeeded, but the problem persists.
Comment 16 Jags FL 2008-07-22 08:04:53 UTC
I've filed this bug originally on 2008-06-06 00:43 MDT, before the OpenSUSE 11.0 final release and as of July 22, 2008 1:04 AM Pacific Time its still there. 

I just finished installing OpenSUSE 11.0 on a new machine and updated / patched it fully and even after that I get this same error as before.

- Jags
Comment 17 Daniel Daugherty 2008-07-29 13:48:50 UTC
I also have this error. I have tried as root and a normal users. Both give me problems.
Comment 18 Simcha Lerner 2008-08-12 16:47:17 UTC
I installed from the retail DVD, have policykit-gnome installed, and also have problems of this message showing up even when logged in as root.

Comment 19 JP Rosevear 2008-10-07 20:58:54 UTC
*** Bug 396940 has been marked as a duplicate of this bug. ***
Comment 20 JP Rosevear 2008-10-07 21:08:23 UTC
*** Bug 411061 has been marked as a duplicate of this bug. ***
Comment 21 Frank Daniel 2008-10-08 22:05:08 UTC
Some more dirt for the mud valve.

I only have this problem when I am 'root'.  The regular user works fine after I gave the user permission to update.  Some hidden security enhancement?

Frank

P.S.
  I am using the $5.00 DVD copy from PCTech101. (Or is it Whole World Foods?)
Comment 22 Luuk de Waal Malefijt 2008-12-17 00:55:21 UTC
I started packagekitd as root in the terminal and it said the following: 
"[WARN  7632] failed to load configuration file: /etc/PolicyKit/PolicyKit.conf:12: parse error: junk after document element
"

I had this in the config:
<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">

<!-- See the manual page PolicyKit.conf(5) for file format -->

<config version="0.1">
<match user="luuk">
<return result="yes" />
</match>
</config>>

So I removed everything after the XML header into this:

<?xml version="1.0" encoding="UTF-8"?> <!-- -*- XML -*- -->

<!DOCTYPE pkconfig PUBLIC "-//freedesktop//DTD PolicyKit Configuration 1.0//EN"
"http://hal.freedesktop.org/releases/PolicyKit/1.0/config.dtd">

<!-- See the manual page PolicyKit.conf(5) for file format -->

<config version="0.1">
</config>

and it works now.
Comment 23 Scott Reeves 2009-01-28 00:39:37 UTC
There are several issues in this bug
1. working when run as normal user but failing when the updater (gpk-update-icon) is run as root. This is not supported and should not be done. The updater does not need to be root, it is designed to be run as a normal user and gains needed permissions through PolicyKit. Running GTK/PolicyKit apps as root is a security risk. In 11.1 the updater will exit when run as root

2. A few reports that PolicyKit-gnome was not installed or a corrupt PolicyKit.conf file and after fixing those issues it worked. Should be all cleared up in 11.1

The remaining issues for cases that have PolicyKit-gnome installed, valid PolicyKit.conf file, and running as regular user are hopefully fixed in 11.1 as well as I am not aware of any reports of this in 11.1.

I am closing as fixed in 11.1