Page 4 of 5

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/04 22:03:05
by sudheerp494
here is /etc/nscd.conf

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/05 16:26:55
by sudheerp494
Hi,

Do you get chance to review my issue.

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/06 17:44:49
by hunter86_bg
As the system was without nscd, the first that comes to my mind is to get rid of it and try the situation.
Most probably a reboot will be needed (at least it won't hurt).

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/06 17:54:24
by sudheerp494
Shall I reinstall nscd and reboot the box.

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/06 21:17:59
by pjsr2
At this point, I would disable nscd and then reboot.

If polkit still doesn't start after disabling nscd, comment out all lines in /etc/nscd.conf and reboot again.

Note that the reboots are required.

It is hard to tell what exactly is wrong on your machine. Currently, I am reasoning along the following line:
Polkit governs the policies that define whether or not a user process is allowed to communicate with kernel services along D-Bus. If polkit cannot start correctly, it either has problems while reading the policy files (in /etc/polkit-1 or /usr/share/polkit-1) or when getting information about users and their privileges (user name/id, groups). Since you are using windbindd (see /etc/nsswitch.conf) , part of this user/group information is coming from a remote host (the winbind server) and catching of that information is done by nscd. As installing nscd started the problems, I don't think that there are problems with the polkit-1 files. I think is is more likely that either nscd is not configured properly, or the use of nscd makes that issues with the authorization services provided by the winbind server now start to surface, where before these issues were failing more quietly.

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/07 00:44:49
by TrevorH
I think he didn't have nscd even installed at the start of this thread, it was something that got installed as part of the "try this" so far. I also think there's something wrong with dbus and I'm not entirely sure that it's not the root cause of the problems.

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/07 11:40:30
by hunter86_bg
Full package check would show of any package is broken/missing files/deps.

Code: Select all

rpm -qa | sort
rpm -Va 

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/07 11:46:36
by pjsr2
Thanks for pointing put TrevorH. I missed the following:
Issue started in last July. I took chair in August. What was background picture. Nobody knows as well.

Did you edit nsswitch.conf ?
No.
Did you reconfigure nscd ? If yes, is it working ?
Nscd was missing on this host. I just installed it. Given #systemctl reboot. But no luck.
As polkit already failed to start before installation of nscd, I think it is worth to try to exclude if the use of winbind is causing the problems.

1) Disable nscd.
2) In /etc/nsswitch.conf, remove winbind from the lines for password, group and shadow.
3) Reboot.

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/08 18:43:14
by sudheerp494
Doesn't show any result with above lines. Still seeing below errors in "/var/log/messages" from server.

Failed to initialize kerberos context! (Included profile directory could not be read)
winbindd[1669]: [2019/04/08 11:41:06.328174, 0] ../source3/librpc/crypto/gse.c:212(gse_context_init)

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Posted: 2019/04/08 19:45:04
by pjsr2
Does your /etc/krb5.conf file contain "include" lines with non-existing directories?