Bug 749453

Summary: Changing the timezone via world clock requires root password
Product: [openSUSE] openSUSE 12.1 Reporter: Gerald Pfeifer <gp>
Component: GNOMEAssignee: E-mail List <gnome-bugs>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: dimstar, jsmeix, lnussel, meissner
Version: Final   
Target Milestone: ---   
Hardware: All   
OS: openSUSE 12.1   
See Also: https://bugzilla.gnome.org/show_bug.cgi?id=646185
Whiteboard:
Found By: Product Management Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: Patch for g-c-c
Screenshot of preferred way to change timezone
Screenshot of greyed out timezone panel

Description Gerald Pfeifer 2012-02-28 22:36:26 UTC
How to reproduce:

 1. Invoke the world clock
 2. Make sure there are at least two timezones, adding one if needed
 3. Select "Set..." for a currently non-selected timezone in the
    "Locations" list.
 4. Watch a dialog "To change time or date settings, you need to
    authenticate" and "Password for root" pop up.

This is really not usable for non-expert users, who have their
machines configured and maintained the geeks among us, but want
to roam (to other timezones, other wireless networks, the printers
there -- think going on vacation abroad).

Can we please make the default more non-geek friendly?
Comment 1 Vincent Untz 2012-02-29 08:21:31 UTC
This is https://bugzilla.gnome.org/show_bug.cgi?id=646185
Comment 2 Johannes Meixner 2012-02-29 09:09:26 UTC
https://bugzilla.gnome.org/show_bug.cgi?id=646185
shows me
------------------------------------------------------------------------------
Forbidden
You don't have permission to access /show_bug.cgi on this server.
Additionally, a 403 Forbidden error was encountered while trying
to use an ErrorDocument to handle the request.
Apache/2.2.3 (Red Hat) Server at bugzilla.gnome.org Port 443
------------------------------------------------------------------------------
Comment 3 Vincent Untz 2012-02-29 09:12:42 UTC
(In reply to comment #2)
> https://bugzilla.gnome.org/show_bug.cgi?id=646185
> shows me
> ------------------------------------------------------------------------------
> Forbidden
> You don't have permission to access /show_bug.cgi on this server.
> Additionally, a 403 Forbidden error was encountered while trying
> to use an ErrorDocument to handle the request.
> Apache/2.2.3 (Red Hat) Server at bugzilla.gnome.org Port 443
> ------------------------------------------------------------------------------

Yeah, apparently, some IP address(es) from the Nürnberg offices are blacklisted, I think darix is already aware of this.
Comment 4 Marcus Meissner 2012-03-01 15:47:22 UTC
Can we help the GNOME upstream somehow?
Comment 5 Vincent Untz 2012-03-01 17:02:54 UTC
I'd say it's really just a matter of changing the code to look if we can change the timezone without authentication, and always enable those widgets if this is the case. At least on the paper, that looks doable.

I might give it a try when I have some time.
Comment 6 Vincent Untz 2012-03-12 14:36:05 UTC
Created attachment 480941 [details]
Patch for g-c-c

Here's the patch I've attached upstream. It works fine here, but I'll wait for an upstream review before integrating it.
Comment 7 Vincent Untz 2012-05-25 12:55:25 UTC
I was waiting  for +1/-1 upstream, but didn't get any good comments. So I'm finally submitting this to Factory.

Do we want to do a maintenance update for 12.1 with the patch?
Comment 8 Gerald Pfeifer 2012-06-05 15:39:55 UTC
(In reply to comment #7)
> Do we want to do a maintenance update for 12.1 with the patch?

I think that would be great.  (And it does address a regression.)
Comment 9 Dominique Leuenberger 2012-07-01 13:07:20 UTC
(In reply to comment #8)
> (In reply to comment #7)
> > Do we want to do a maintenance update for 12.1 with the patch?
> 
> I think that would be great.  (And it does address a regression.)

A backported patch to 12.1 gnome-control-center has been applied on g-c-c in a specially prepared branch:
http://download.opensuse.org/repositories/home:/dimstar:/branches:/openSUSE:/12.1:/Update/standard

Gerald,
Please test if this package works for you. If it does, I will gladly forward it for consideration into maintenance.
Comment 10 Gerald Pfeifer 2012-07-02 00:24:05 UTC
The current updates in
http://download.opensuse.org/repositories/home:/dimstar:/branches:/openSUSE:/12.1:/Update/standard
still require the root password when I want to change the timezone via the world clock.

Disclaimer: I logged out and in again after applying them, did not reboot.
Disclaimer #2: GNOME 3 fallback mode.
Comment 11 Dominique Leuenberger 2012-07-02 07:12:17 UTC
After rereading comment 0 I'm actually starting to wonder if we understood your report right.

Just to cross-check, what I did to change time:
- Gnome-control-center
- Date and time
- Choose on the map a new location.

Can you confirm we talk about the same thing here?
Comment 12 Gerald Pfeifer 2012-07-04 20:43:01 UTC
(In reply to comment #11)
> After rereading comment 0 I'm actually starting to wonder if we understood your
> report right.
> 
> Just to cross-check, what I did to change time:
> - Gnome-control-center
> - Date and time
> - Choose on the map a new location.
> 
> Can you confirm we talk about the same thing here?

I have two answers to that. :-)

First, I now tried this, and it does not work for me.  That is, I
do have to enter the root password when changing the timezone and
I verified that I have

  libgnome-control-center1-3.2.1-2.10.1.x86_64
  gnome-control-center-3.2.1-2.10.1.x86_64
  gnome-control-center-user-faces-3.2.1-2.10.1.x86_64
  gnome-control-center-branding-openSUSE-12.1-3.2.1.noarch

Is there anything I may be missing?
Comment 13 Gerald Pfeifer 2012-07-04 20:45:54 UTC
Created attachment 497441 [details]
Screenshot of preferred way to change timezone

Second, this is how I have been changing timezones for the last
couple of years.  And that, too, now requires the root password.

Should we clone this bug for that, since it is different?
Comment 14 Vincent Untz 2012-07-05 06:45:26 UTC
It's possibly the same bug (although I'm not sure anyone ever tested the new code in gnome-panel for this ;-)), so let's wait before splitting the bug.

Interestingly, I tried the package on my current machine (12.1, yeah, still waiting for some replacement for my real machine), and... it doesn't work either. What works fine is that I can interact with the map, but I'm still asked for polkit authentication.

What's even more interesting is the following:

$ grep org.freedesktop.timedate1.set-timezone /etc/polkit-*
/etc/polkit-default-privs.restrictive:org.freedesktop.timedate1.set-timezone                          auth_admin_keep
/etc/polkit-default-privs.standard:org.freedesktop.timedate1.set-timezone                          auth_admin_keep:auth_admin_keep:yes

(looks like what I expect)

$ pkaction --action-id org.freedesktop.timedate1.set-timezone --verbose

org.freedesktop.timedate1.set-timezone:
  description:       Set system timezone
  message:           Authentication is required to set the system timezone.
  vendor:            The systemd Project
  vendor_url:        http://www.freedesktop.org/wiki/Software/systemd
  icon:
  implicit any:      auth_admin_keep
  implicit inactive: auth_admin_keep
  implicit active:   auth_admin_keep

Ouch. Looks wrong. I don't know if it's a bug in pkaction, or if it merely reflects the issue we're hitting here.
Comment 15 Atri Bhattacharya 2013-02-01 20:03:36 UTC
Created attachment 523079 [details]
Screenshot of greyed out timezone panel

This seems to have become a problem with 12.3 again...

Should I open a new bug?
Comment 16 Vincent Untz 2013-02-01 23:42:33 UTC
(In reply to comment #15)
> This seems to have become a problem with 12.3 again...
> 
> Should I open a new bug?

We already have bug 796059 for this...
Comment 17 Marcus Meissner 2013-02-04 10:20:16 UTC
track this in the new bug.


(i wonder how GNOME manages to change this method every release :( )