Comment 15 for bug 1850977

Revision history for this message
Jason Stover (ir-jms) wrote :

Oliver,

  > if you are marked as admin in the policyKit setup

  Where do you find this? Where is the definition for what `auth_admin` does located? From the freedesktop site it *seems* that it's an "Administrative user," which to me is sudoers. As the system admin I'm not defining an admin user anywhere else but sudoers. If it's just by group that's broken all to hell...

  The freedesktop.org site states[1]:
  > If the system is configured without a root account it may prompt for a specific user designated as the administrative user:

  Where do you designate a user as the administrative user outside of putting them in sudoers?

  I need to implement government regulations. Some users need to be in the admin group from LDAP, but cannot install software on workstations. sudoers *should* control this. The init system has nothing to do with account elevation... unless they're taking that over as well.

  This was a straight up install from Ubuntu. Nothing in my Salt configurations touch polkit settings.

  Since I'm doing LDAP login, there's /etc/pam.d entries in files for LDAP auth that polkit uses. Would this be interfering?

-J

[1] - https://www.freedesktop.org/software/polkit/docs/latest/polkit.8.html