Authorization not available. Check if polkit service is running or see debug message for more information.
-
- Posts: 32
- Joined: 2019/04/01 17:29:22
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
here is /etc/nscd.conf
- Attachments
-
- org 04022019.PNG (36.7 KiB) Viewed 4285 times
-
- Posts: 32
- Joined: 2019/04/01 17:29:22
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Hi,
Do you get chance to review my issue.
Do you get chance to review my issue.
-
- Posts: 2019
- Joined: 2015/02/17 15:14:33
- Location: Bulgaria
- Contact:
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
As the system was without nscd, the first that comes to my mind is to get rid of it and try the situation.
Most probably a reboot will be needed (at least it won't hurt).
Most probably a reboot will be needed (at least it won't hurt).
-
- Posts: 32
- Joined: 2019/04/01 17:29:22
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Shall I reinstall nscd and reboot the box.
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
At this point, I would disable nscd and then reboot.
If polkit still doesn't start after disabling nscd, comment out all lines in /etc/nscd.conf and reboot again.
Note that the reboots are required.
It is hard to tell what exactly is wrong on your machine. Currently, I am reasoning along the following line:
Polkit governs the policies that define whether or not a user process is allowed to communicate with kernel services along D-Bus. If polkit cannot start correctly, it either has problems while reading the policy files (in /etc/polkit-1 or /usr/share/polkit-1) or when getting information about users and their privileges (user name/id, groups). Since you are using windbindd (see /etc/nsswitch.conf) , part of this user/group information is coming from a remote host (the winbind server) and catching of that information is done by nscd. As installing nscd started the problems, I don't think that there are problems with the polkit-1 files. I think is is more likely that either nscd is not configured properly, or the use of nscd makes that issues with the authorization services provided by the winbind server now start to surface, where before these issues were failing more quietly.
If polkit still doesn't start after disabling nscd, comment out all lines in /etc/nscd.conf and reboot again.
Note that the reboots are required.
It is hard to tell what exactly is wrong on your machine. Currently, I am reasoning along the following line:
Polkit governs the policies that define whether or not a user process is allowed to communicate with kernel services along D-Bus. If polkit cannot start correctly, it either has problems while reading the policy files (in /etc/polkit-1 or /usr/share/polkit-1) or when getting information about users and their privileges (user name/id, groups). Since you are using windbindd (see /etc/nsswitch.conf) , part of this user/group information is coming from a remote host (the winbind server) and catching of that information is done by nscd. As installing nscd started the problems, I don't think that there are problems with the polkit-1 files. I think is is more likely that either nscd is not configured properly, or the use of nscd makes that issues with the authorization services provided by the winbind server now start to surface, where before these issues were failing more quietly.
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
I think he didn't have nscd even installed at the start of this thread, it was something that got installed as part of the "try this" so far. I also think there's something wrong with dbus and I'm not entirely sure that it's not the root cause of the problems.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
-
- Posts: 2019
- Joined: 2015/02/17 15:14:33
- Location: Bulgaria
- Contact:
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Full package check would show of any package is broken/missing files/deps.
Code: Select all
rpm -qa | sort
rpm -Va
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Thanks for pointing put TrevorH. I missed the following:
1) Disable nscd.
2) In /etc/nsswitch.conf, remove winbind from the lines for password, group and shadow.
3) Reboot.
As polkit already failed to start before installation of nscd, I think it is worth to try to exclude if the use of winbind is causing the problems.Issue started in last July. I took chair in August. What was background picture. Nobody knows as well.
Did you edit nsswitch.conf ?
No.
Did you reconfigure nscd ? If yes, is it working ?
Nscd was missing on this host. I just installed it. Given #systemctl reboot. But no luck.
1) Disable nscd.
2) In /etc/nsswitch.conf, remove winbind from the lines for password, group and shadow.
3) Reboot.
-
- Posts: 32
- Joined: 2019/04/01 17:29:22
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Doesn't show any result with above lines. Still seeing below errors in "/var/log/messages" from server.
Failed to initialize kerberos context! (Included profile directory could not be read)
winbindd[1669]: [2019/04/08 11:41:06.328174, 0] ../source3/librpc/crypto/gse.c:212(gse_context_init)
Failed to initialize kerberos context! (Included profile directory could not be read)
winbindd[1669]: [2019/04/08 11:41:06.328174, 0] ../source3/librpc/crypto/gse.c:212(gse_context_init)
Re: Authorization not available. Check if polkit service is running or see debug message for more information.
Does your /etc/krb5.conf file contain "include" lines with non-existing directories?