Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Tips and tricks for ConsoleKit, PolicyKit, and udev helpers
View unanswered posts
View posts from last 24 hours

Goto page Previous  1, 2, 3 ... 14, 15, 16  
Reply to topic    Gentoo Forums Forum Index Desktop Environments
View previous topic :: View next topic  
Author Message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1070
Location: Edinburgh, UK

PostPosted: Wed Apr 17, 2013 10:05 am    Post subject: Reply with quote

ssuominen wrote:

login-session-id = '' should never be empty. It's mentioned in the first post of this thread. If it's empty it's almost certainly because of missing CONFIG_AUDITSYSCALL=y kernel option:

Code:

# zgrep AUDITSYSCALL /proc/config.gz
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /lib/modules/$(uname -r)/build/.config
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /usr/src/linux/.config
CONFIG_AUDITSYSCALL=y


The kernel option can be worked around using some Display Managers with advanced internal ConsoleKit support, but really, enable it, it's not worth the trouble figuring out which DM works and which doesn't without the option.

Sorry for the delay in answer, but I'm swamped with work lately.


Alas no, I've had the kernel option enabled for some time. Other possibilities?

No worries about delay, this prob is something I learned to tolerate long before I even posted about it ;)
Back to top
View user's profile Send private message
ssuominen
Developer
Developer


Joined: 30 Sep 2005
Posts: 2000
Location: Finland

PostPosted: Wed Apr 17, 2013 10:20 am    Post subject: Reply with quote

Havin_it wrote:
ssuominen wrote:

login-session-id = '' should never be empty. It's mentioned in the first post of this thread. If it's empty it's almost certainly because of missing CONFIG_AUDITSYSCALL=y kernel option:

Code:

# zgrep AUDITSYSCALL /proc/config.gz
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /lib/modules/$(uname -r)/build/.config
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /usr/src/linux/.config
CONFIG_AUDITSYSCALL=y


The kernel option can be worked around using some Display Managers with advanced internal ConsoleKit support, but really, enable it, it's not worth the trouble figuring out which DM works and which doesn't without the option.

Sorry for the delay in answer, but I'm swamped with work lately.


Alas no, I've had the kernel option enabled for some time. Other possibilities?

No worries about delay, this prob is something I learned to tolerate long before I even posted about it ;)


Are you absolutely sure? You can verify by looking if /proc/<pid>/sessionid is available, like:

Code:

# ls -l /proc/`pidof console-kit-daemon`/sessionid
-r--r--r-- 1 root root 0 Apr 17 13:12 /proc/<pid number will be here>/sessionid
# cat /proc/`pidof console-kit-daemon`/sessionid
<some random numbers will be here>


If the sessionid proc information is not available, then even if you have =y when you grep the kernel config some other option masqueraded it, look through menuconfig.

Also good idea to enable CONFIG_IKCONFIG_PROC=y to get /proc/config.gz to get real information from the running kernel, because some people have had old .config picked up
by automated tools like genkernel.

If none of that was the case, continuing...

What's the output of `emerge -pv pambase consolekit` and `grep pam_ck /etc/pam.d/*`? It shoud look like:

Code:

# grep pam_ck /etc/pam.d/*
/etc/pam.d/system-login:-session   optional   pam_ck_connector.so nox11


And...

Quote:

[ebuild R ] sys-auth/pambase-20120417-r1 USE="consolekit cracklib sha512 -debug -gnome-keyring -minimal -mktemp -pam_krb5 -pam_ssh -passwdqc (-selinux) -systemd" 4 kB
[ebuild R ] sys-auth/consolekit-0.4.5_p20120320-r2 USE="acl pam policykit -debug -doc (-selinux) {-test}" 0 kB


Notice USE="consolekit pam" must be enabled. This is related to getting the pam_ck_connector.so working.

What display manager did you use again? None and startx? What is in your ~/.xinitrc and ~/.xsession? Have you at some point inserted manual ck-launch-session to files in /etc/X11/Sessions?
Back to top
View user's profile Send private message
Havin_it
Veteran
Veteran


Joined: 17 Jul 2005
Posts: 1070
Location: Edinburgh, UK

PostPosted: Wed Apr 17, 2013 12:00 pm    Post subject: Reply with quote

ssuominen wrote:

Code:

# zgrep AUDITSYSCALL /proc/config.gz
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /lib/modules/$(uname -r)/build/.config
CONFIG_AUDITSYSCALL=y
# grep AUDITSYSCALL /usr/src/linux/.config
CONFIG_AUDITSYSCALL=y

...
Are you absolutely sure? You can verify by looking if /proc/<pid>/sessionid is available, like:

Code:

# ls -l /proc/`pidof console-kit-daemon`/sessionid
-r--r--r-- 1 root root 0 Apr 17 13:12 /proc/<pid number will be here>/sessionid
# cat /proc/`pidof console-kit-daemon`/sessionid
<some random numbers will be here>

10-digit number, check.

Quote:
If the sessionid proc information is not available, then even if you have =y when you grep the kernel config some other option masqueraded it, look through menuconfig.

Also good idea to enable CONFIG_IKCONFIG_PROC=y to get /proc/config.gz to get real information from the running kernel, because some people have had old .config picked up
by automated tools like genkernel.


I checked all three one-liners you used above, and make menuconfig: all showing =y. I don't use genkernel, just a script that copies my last .config to the new kernel dir and runs "make oldconfig".

Quote:
If none of that was the case, continuing...

What's the output of `emerge -pv pambase consolekit` and `grep pam_ck /etc/pam.d/*`? It shoud look like:

Code:

# grep pam_ck /etc/pam.d/*
/etc/pam.d/system-login:-session   optional   pam_ck_connector.so nox11

Yep, same. The only non-standard thing I have in pam config is pam_mount, so two files are altered:

/etc/pam.d/system-auth
Code:
auth            required        pam_env.so
auth            required        pam_unix.so try_first_pass likeauth nullok
auth            optional        pam_permit.so
auth            optional        pam_mount.so
 
account         required        pam_unix.so
account         optional        pam_permit.so
 
password        required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password        required        pam_unix.so try_first_pass use_authtok nullok sha512 shadow                                     
password        optional        pam_permit.so                                                                                   
                                                                                                                               
session         required        pam_limits.so
session         required        pam_env.so
session         required        pam_unix.so
session         optional        pam_permit.so
session         optional        pam_mount.so


/etc/pam.d/system-login
Code:
auth            required        pam_tally2.so onerr=succeed
auth            required        pam_shells.so
auth            required        pam_nologin.so
auth            include         system-auth
#auth           substack        system-auth
#auth           optional        pam_mount.so
 
account         required        pam_access.so
account         required        pam_nologin.so
account         include         system-auth
account         required        pam_tally2.so onerr=succeed
 
password        include         system-auth
 
session         optional        pam_loginuid.so
session         required        pam_env.so
session         optional        pam_lastlog.so
session         include         system-auth
-session        optional        pam_ck_connector.so nox11
session         optional        pam_motd.so motd=/etc/motd
session         optional        pam_mail.so

Quote:

And...

Quote:

[ebuild R ] sys-auth/pambase-20120417-r1 USE="consolekit cracklib sha512 -debug -gnome-keyring -minimal -mktemp -pam_krb5 -pam_ssh -passwdqc (-selinux) -systemd" 4 kB
[ebuild R ] sys-auth/consolekit-0.4.5_p20120320-r2 USE="acl pam policykit -debug -doc (-selinux) {-test}" 0 kB


Notice USE="consolekit pam" must be enabled. This is related to getting the pam_ck_connector.so working.


Code:
[ebuild   R    ] sys-auth/pambase-20120417-r1  USE="(consolekit) cracklib sha512 -debug -gnome-keyring -minimal -mktemp -pam_krb5 -pam_ssh -passwdqc (-selinux) -systemd" 4 kB
[ebuild     U  ] sys-auth/polkit-0.110 [0.109-r1] USE="introspection kde nls pam -examples -gtk (-selinux) (-systemd)" 1,358 kB
[ebuild     U  ] sys-auth/consolekit-0.4.5_p20120320-r2 [0.4.5_p20120320-r1] USE="acl pam (policykit) -debug -doc (-selinux) {-test}" 101 kB
[/quote]
Note I'm currently halfway through a world upgrade that crapped out :/

Quote:
What display manager did you use again? None and startx? What is in your ~/.xinitrc and ~/.xsession? Have you at some point inserted manual ck-launch-session to files in /etc/X11/Sessions?


KDM, no .xinitrc or .xsession, nothing added to Session files.
Back to top
View user's profile Send private message
Goverp
Guru
Guru


Joined: 07 Mar 2007
Posts: 325

PostPosted: Wed May 29, 2013 7:49 am    Post subject: Reply with quote

My PC has been suffering from various of the problems described in this thread, but was correctly installed and configured. It turned out that the polkitd daemon was dying after every command, and that in turn was due to a segfault in spidermonkey.

It turns out that this problem was caused by overly-aggressive optimization settings when compiling polkit and spidermonkey. Using CFLAGS="-O2 -march=i686" cured the segfault and now polkitd works properly. (For a little more detail, see here.)
_________________
Greybeard
Back to top
View user's profile Send private message
cwr
Veteran
Veteran


Joined: 17 Dec 2005
Posts: 1632

PostPosted: Sun Jan 12, 2014 12:24 pm    Post subject: Reply with quote

Thanks for the summary, Ssuominen - I messed around for most of an afternoon
trying to sort out Gnome 2.x menus and polkit before actually _reading_ your
checklist; one emerge later and it all worked ...

Will
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Desktop Environments All times are GMT
Goto page Previous  1, 2, 3 ... 14, 15, 16
Page 16 of 16

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum