Arch Linux

quayasil

Member

Registered: 2008-11-09

Posts: 117

Restart/reboot from XFCE/Mate stopped working :-(

LightDM, the choice is XFCE and Mate.
Workstation used for a long time, twice a year I take a previous snaphot (the system as it was 6 months ago) and do a full upgrade. Used to work and.. stopped. I'm a UNIX admin and systemd+polkit mix is a mystery for me (I suppose: for everyone including the authors) :-(

Pressing Reboot/Shutdown when logged in result in just logout.

$ systemctl reboot

result in:

"WARNING: Unable to restart system: Interactive authentication required."

But - and it's funny - after logging out users can press LighDM POWER button and it works correctly - it powers off/restarts. That means logged out users have wider privileges than logged in??

I've read the https://wiki.archlinux.org/index.php/Al … o_shutdown

$ loginctl show-session $XDG_SESSION_ID

produces the output:

EnableWallMessages=no
NAutoVTs=6
KillExcludeUsers=root
KillUserProcesses=no
RebootToFirmwareSetup=no
IdleHint=yes
IdleSinceHint=0
IdleSinceHintMonotonic=0
InhibitDelayMaxUSec=5s
HandlePowerKey=poweroff
HandleSuspendKey=suspend
HandleHibernateKey=hibernate
HandleLidSwitch=suspend
HandleLidSwitchDocked=ignore
HoldoffTimeoutUSec=30s
IdleAction=ignore
IdleActionUSec=30min
PreparingForShutdown=no
PreparingForSleep=no
Docked=no 

It doesn't include:

Active=yes
Remote=no

It should but it doesn't :-(

Standard, not customized lightdm and lightdm-gtk-greater configuration.
Polkit installed and working.
No rules customization.
No /etc/X11/... files customization that can affect it.
A light change in pam files for LDAP authentication (system-auth):

auth       optional     pam_group.so
auth       sufficient   pam_ldap.so
auth      required  pam_unix.so     try_first_pass nullok
auth      optional  pam_permit.so
auth      required  pam_env.so

account    sufficient   pam_ldap.so
account   required  pam_unix.so
account   optional  pam_permit.so
account   required  pam_time.so

password   sufficient   pam_ldap.so use_authtok
password  required  pam_unix.so     try_first_pass nullok sha512 shadow
password  optional  pam_permit.so

session    sufficient   pam_ldap.so
session   required  pam_limits.so
session   required  pam_unix.so
session   optional  pam_permit.so

Any idea?