Authorizations shows no users when using LDAP

[mtom]

Binary package hint: policykit-gnome

I installed Jaunty last week and setup ldap for users and groups. So far everything works fine. The ldap-users show up in the fast-user-switcher and getent passwd shows them, too.
But when I click on System->Administration->Authorizations and would like to change something there and get the policykit-authenticate dialog, I have no users to choose from, everything is greyed out, so I cannot continue.
It is the same with any other policykit-authentication dialog.
I've looked around but I found very little documentation about the policykit stuff. Any hints and pointers are welcomed.

$ lsb_release -rd
Description: Ubuntu 9.04
Release: 9.04

policykit-gnome:
  Installed: 0.9-1ubuntu3
  Candidate: 0.9-1ubuntu3
  Version table:
 *** 0.9-1ubuntu3 0
        500 http://de.archive.ubuntu.com jaunty/main Packages
        100 /var/lib/dpkg/status

[James Westby (james-w)]

On Wed, 2009-05-06 at 19:24 +0000, mtom wrote:
> Public bug reported:
>
> Binary package hint: policykit-gnome
>
> I installed Jaunty last week and setup ldap for users and groups. So far everything works fine. The ldap-users show up in the fast-user-switcher and getent passwd shows them, too.
> But when I click on System->Administration->Authorizations and would like to change something there and get the policykit-authenticate dialog, I have no users to choose from, everything is greyed out, so I cannot continue.
> It is the same with any other policykit-authentication dialog.
> I've looked around but I found very little documentation about the policykit stuff. Any hints and pointers are welcomed.

Hi,

What it is probably trying to list there is admin users. Do you have
any users in the "admin" group? What does

  getent group admin

return? Have you modified your /etc/PolicyKit/PolicyKit.conf?

Sounds similar to bug 368650.

Thanks,

James

[mtom (thloh)]

Hi James,

I didn't modify /etc/PolicyKit/PolicyKit.conf, so it's still the admin group which matters.

But you were right, getent group admin only returned the local group memberships. I changed the groups setting in /etc/nsswitch.conf from
group: files ldap

to

group: ldap files

and it works. Any further hints on how one could configure this?

Regards,
Thomas

[James Westby (james-w)]

On Wed, 2009-05-06 at 19:57 +0000, mtom wrote:
> Hi James,
>
> I didn't modify /etc/PolicyKit/PolicyKit.conf, so it's still the admin
> group which matters.
>
> But you were right, getent group admin only returned the local group memberships. I changed the groups setting in /etc/nsswitch.conf from
> group: files ldap
>
> to
>
> group: ldap files
>
> and it works. Any further hints on how one could configure this?

Isn't that enough? I would expect it to do the right thing now.

Thanks,

James

[mtom (thloh)]

OK, thought there might be something else. But it works changing nsswitch.conf, so this bug can be marked as solved.

Thanks,
Thomas

[James Westby (james-w)]

Closing as suggested.

Thanks,

James