You are not logged in.
I have three systems with Arch: two desktops and one laptop. They have different sets of packages installed, but there are things in common, for example, the three have XFCE.
If I insert a USB stick in a USB port, it appears on the left side of Thunar. This is true for the three systems. If I left-click on it, for two of the systems, the USB stick is mounted. This is the behaviour I desire. For the third one I get a dialogue box that says:
Failed to mount “<configured label of the USB stick>”.
Not authorized to perform operation.
CloseThis is what I would like to fix. This is not a new issue, it has been like this for a few years. This is however the first time I request help for it.
It is not an issue with thunar because I get a similar error message with pcmanfm. It is not a thunar configuration issue as it is similar to the two systems where it works. I thought that a package is missing in the system where this does not work, however i have not been able to find such a package. For the three systems my user ID is 1000. There are different group memberships in the three systems however nothing that would have an effect this issue. I thought of polkit configuration, however I don’t remember having ever configured polkit. I thought of udev configuration. Some years ago I changed udev configuration but the changes were for the keyboard. I don’t remember changing anything to do with USB stick although I cannot rule it out.
Any ideas about how I can investigate this and make progress?
Last edited by archdub (2026-01-08 20:21:35)
Offline
Well, what are the output of the following:
groups
and
pacman -Qs udisks
??
Edit: How do those differ from the two working systems?
Last edited by ewaller (2026-01-06 10:55:29)
Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way
Offline
Thanks for your reply.
For one working system and the non-working system:
pacman -Qs udisks
local/udisks2 2.11.0-1
Daemon, tools and libraries to access and manipulate disks, storage devices and technologiesFor the working system:
groups
username wheel uucp log audio vboxusers wireshark adbusers realtimeFor the non-working system:
groups
username lp wheel uucp wireshark libvirtOffline
That is not what I expected.
What is the output if you try to mount the device using udisksctl mount /the/path/to/the/device/node
(Obviously changing the node name to something like /dev/sdb1)
Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way
Offline
Thanks for your email. There was progress with it.
First I ran the test on the system where I got the issue.
udisksctl mount -b /dev/sdb1
==== AUTHENTICATING FOR org.freedesktop.udisks2.filesystem-mount ====
Authentication is required to mount DISK 2.0 (/dev/sdb1)
Authenticating as: myname
Password:
==== AUTHENTICATION COMPLETE ====
Mounted /dev/sdb1 at /run/media/myname/GOLD-PENAs you see I was prompted for the password (it auto-filled my user name).
Then I ran the same command on the system where there is no issue and it mounted it without prompting for password.
So the question is why I am prompted for the password in one system and not the other. As I said in my original post I don’t remember ever changing polkit configuration, so have not idea why I am prompted for the password.
Offline
if ur getting prompted through the terminal for a password that means you lack a graphical polkit agent e.g. https://archlinux.org/packages/extra/x8 … kde-agent/
Offline
if ur getting prompted through the terminal for a password that means you lack a graphical polkit agent e.g. https://archlinux.org/packages/extra/x8 … kde-agent/
Thanks for your reply.
According to the wiki's polkit page: “Cinnamon, Deepin, Hyprland, GNOME, GNOME Flashback, KDE, LXDE, LXQt, MATE, and Xfce have an authentication agent already.”
I am running Xfce. xfce4-session has as a dependence polkit-gnome. I checked and its process is running.
Offline
Does the agent show up for "pkexec ls" ?
Offline
Does the agent show up for "pkexec ls" ?
Thanks for your message, Seth.
On the system where it does NOT work:
pkexec ls
==== AUTHENTICATING FOR org.freedesktop.policykit.exec ====
Authentication is needed to run `/usr/bin/ls' as the super user
Authenticating as: myname
Password:
==== AUTHENTICATION FAILED ====
Error executing command as another user: Not authorized
This incident has been reported.On the system where it works, a dialogue box appears briefly for a second, but shaking so I cannot read it, or maybe it is not a single dialogue box but many, in any case I cannot read them, and I get what follows on the console after the dialogue box disappears:
pkexec ls
Error executing command as another user: Not authorized
This incident has been reported.Offline
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNamesHow do you start the malfunctioning xfce session?
Offline
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNamesHow do you start the malfunctioning xfce session?
~/ dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
method return time=1767820801.109151 sender=org.freedesktop.DBus -> destination=:1.196 serial=4294967295 reply_serial=2
array [
string "org.freedesktop.DBus"
string ":1.2"
string ":1.5"
string ":1.6"
string ":1.7"
string ":1.8"
string ":1.9"
string ":1.10"
string ":1.12"
string ":1.14"
string ":1.15"
string ":1.16"
string ":1.17"
string ":1.18"
string ":1.19"
string ":1.20"
string ":1.22"
string ":1.23"
string ":1.24"
string ":1.25"
string ":1.26"
string ":1.27"
string ":1.28"
string ":1.29"
string ":1.30"
string ":1.31"
string ":1.32"
string ":1.33"
string ":1.34"
string ":1.35"
string ":1.36"
string ":1.37"
string ":1.41"
string ":1.42"
string ":1.43"
string ":1.44"
string ":1.57"
string ":1.58"
string ":1.59"
string ":1.61"
string ":1.63"
string ":1.64"
string ":1.65"
string ":1.66"
string ":1.82"
string ":1.84"
string ":1.88"
string ":1.89"
string ":1.90"
string ":1.91"
string ":1.96"
string ":1.97"
string ":1.106"
string ":1.113"
string ":1.117"
string ":1.134"
string ":1.195"
string ":1.196"
string "ca.desrt.dconf"
string "org.a11y.Bus"
string "org.blueman.Applet"
string "org.freedesktop.FileManager1"
string "org.freedesktop.Notifications"
string "org.freedesktop.PowerManagement"
string "org.freedesktop.ReserveDevice1.Audio0"
string "org.freedesktop.network-manager-applet"
string "org.freedesktop.secrets"
string "org.freedesktop.systemd1"
string "org.gnome.GConf"
string "org.gnome.Tomboy"
string "org.gnome.keyring"
string "org.gtk.vfs.Daemon"
string "org.gtk.vfs.GPhoto2VolumeMonitor"
string "org.gtk.vfs.MTPVolumeMonitor"
string "org.gtk.vfs.Metadata"
string "org.gtk.vfs.UDisks2VolumeMonitor"
string "org.gtk.vfs.mountpoint_1935"
string "org.gtk.vfs.mountpoint_39367"
string "org.gtk.vfs.mountpoint_8129"
string "org.kde.StatusNotifierWatcher"
string "org.kde.kate-2964"
string "org.kde.kdeconnect"
string "org.kde.kdeconnect.daemon"
string "org.kde.okular-56888"
string "org.kde.okular.Instance_fe7b0dbb39514fad90e121ad672bba27"
string "org.kdevelop.kdevelop-2933"
string "org.kdevelop.kdevelop-47575"
string "org.kdevelop.kdevplatform-lock-2cd43a36-a8bd-4f61-a231-100fca067b7f"
string "org.kdevelop.kdevplatform-lock-b7096363-e894-4ddf-8e46-ad21d71d1ebd"
string "org.mozilla.firefox.L2hvbWUvYW50b25pby8ubW96aWxsYS9maXJlZm94LzV5bWNraWM3LmRlZmF1bHQ_"
string "org.pipewire.Telephony"
string "org.pulseaudio.Server"
string "org.xfce.FileManager"
string "org.xfce.Notifyd"
string "org.xfce.Panel"
string "org.xfce.PowerManager"
string "org.xfce.ScreenSaver"
string "org.xfce.SessionManager"
string "org.xfce.SettingsDaemon"
string "org.xfce.Thunar"
string "org.xfce.mousepad"
string "org.xfce.orage"
]
~/ dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
method return time=1767820814.916946 sender=org.freedesktop.DBus -> destination=:1.1162 serial=4294967295 reply_serial=2
array [
string "org.freedesktop.DBus"
string ":1.0"
string ":1.1"
string ":1.2"
string ":1.3"
string ":1.4"
string ":1.5"
string ":1.8"
string ":1.9"
string ":1.15"
string ":1.16"
string ":1.17"
string ":1.18"
string ":1.19"
string ":1.20"
string ":1.21"
string ":1.22"
string ":1.23"
string ":1.24"
string ":1.25"
string ":1.26"
string ":1.27"
string ":1.28"
string ":1.29"
string ":1.30"
string ":1.31"
string ":1.32"
string ":1.33"
string ":1.34"
string ":1.35"
string ":1.36"
string ":1.37"
string ":1.38"
string ":1.39"
string ":1.40"
string ":1.41"
string ":1.80"
string ":1.81"
string ":1.89"
string ":1.91"
string ":1.92"
string ":1.93"
string ":1.440"
string ":1.1156"
string ":1.1162"
string "com.redhat.NewPrinterNotification"
string "com.redhat.PrinterDriversInstaller"
string "net.psecure.pulse"
string "org.freedesktop.Accounts"
string "org.freedesktop.ColorManager"
string "org.freedesktop.ModemManager1"
string "org.freedesktop.NetworkManager"
string "org.freedesktop.PolicyKit1"
string "org.freedesktop.UDisks2"
string "org.freedesktop.UPower"
string "org.freedesktop.login1"
string "org.freedesktop.systemd1"
]I ran dbus-send in the good and the bad system, and compared the results. There were plenty of differences due to different process ids, different set of running programs, etc, but I saw nothing that seemed relevant to the issue at hand. Above is the listing for the system with the issue.
My three systems are configured in a similar way: a) no display manager; b) after boot I am shown the Linux console. c) login shell is zsh; d) startx called from .zprofile if I login as myself (user 1000); e) startxfce4 is called from .xinitrc
Offline
startx called from .zprofile
Please post your xinitrc and/or see the last link below (2nd blue note on what to include at least)
There's an a lot of KDE stuff in your session but no https://www.freedesktop.org/software/po … Agent.html
Offline
startx called from .zprofile
Please post your xinitrc and/or see the last link below (2nd blue note on what to include at least)
There's an a lot of KDE stuff in your session but no https://www.freedesktop.org/software/po … Agent.html
I have not touched .xinitrc in years, I don’t remember how I got the original version. There are some small differences between the one that does not work (below) and the one that works, but nothing that would obviously be relevant.
#!/bin/sh
# ~/.xinitrc
userresources=$HOME/.Xresources
usermodmap=$HOME/.Xmodmap
sysresources=/etc/X11/xinit/.Xresources
sysmodmap=/etc/X11/xinit/.Xmodmap
# merge in defaults and keymaps
if [ -f $sysresources ]; then
xrdb -merge $sysresources
fi
if [ -f $sysmodmap ]; then
xmodmap $sysmodmap
fi
#if [ -f "$userresources" ]; then
# xrdb -merge "$userresources"
#fi
#if [ -f "$usermodmap" ]; then
# xmodmap "$usermodmap"
#fi
# start some nice programs
if [ -d /etc/X11/xinit/xinitrc.d ] ; then
for f in /etc/X11/xinit/xinitrc.d/?*.sh ; do
[ -x "$f" ] && . "$f"
done
unset f
fi
# start xfce
exec /usr/bin/startxfce4Yes, I regularly use a few KDE/QT apps. The set of apps varies slightly between the systems. In all systems I use okular and kate. On this system with the issue I also use kdevelop, ksvn, kompare, etc. I compared the list of packages that use polkit. It is exactly the same four packages in both systems (the one where it works and the one where it does no work).
~/ pacman -Qs polkit
local/polkit 127-3
Application development toolkit for controlling system-wide privileges
local/polkit-gnome 0.105-12
Legacy polkit authentication agent for GNOME
local/polkit-qt5 0.200.0-1
A library that allows developers to access PolicyKit API with a nice Qt-style API
local/polkit-qt6 0.200.0-1
A library that allows developers to access PolicyKit API with a nice Qt-style API~/ systemctl get-default
multi-user.targetLast edited by archdub (2026-01-07 22:12:25)
Offline
xinitrc looks fine…
https://archlinux.org/packages/extra/x8 … 4-session/ includes etc/xdg/autostart/xfce-polkit-gnome-authentication-agent-1.desktop which starts /usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1 which is in the polkit-gnome package (so much for "own polkit agent")
Offline
xinitrc looks fine…
https://archlinux.org/packages/extra/x8 … 4-session/ includes etc/xdg/autostart/xfce-polkit-gnome-authentication-agent-1.desktop which starts /usr/lib/polkit-gnome/polkit-gnome-authentication-agent-1 which is in the polkit-gnome package (so much for "own polkit agent")
Yes, and the final link in that chain is in Xfce Settings/Session and Startup/Application Autostart. There are tick boxes for various services including one for PolicyKit Authentication Agent, which is ticked in my systems. If it was unticked the polkit-gnome-authentication-agent-1 process would not start.
Last edited by archdub (2026-01-07 23:39:03)
Offline
If polkit-gnome-authentication-agent-1 is running it didn't register on the session bus - what if you kill and manually start it?
You can use
dbus-monitorto sniff its communication w/ the session bus.
Offline
If polkit-gnome-authentication-agent-1 is running it didn't register on the session bus - what if you kill and manually start it?
You can usedbus-monitorto sniff its communication w/ the session bus.
You previously suggested tests with dbus-send. I previously ran dbus-send in the good and the bad system, and compared the results. There were plenty of differences due to different process ids, different set of running programs, etc, but I saw nothing that seemed relevant to the issue at hand. In particular PolicyKit appeared, for both good and bad systems, only for system, not for session.
I ran the dbus monitor as you suggested, and big surprise, it fixed the issue! I have no idea how it got fixed. I ran the dbus monitor both as myself and root, so it could have been fixed in either way. It seems to be permanently fixed, as I rebooted and it is still fixed, and it works both with thunar and pcmanfm. I did not change any configuration. There is a folder .dbus that has a single file for both me and root, but this file was changed 8 or 10 years ago, so it does not explain why it is working now. I could not find any other file that looked like dbus configuration.
Thanks a lot for your help. I am glad that after years of not working this issue has now been fixed, even if we don't know how it got fixed. I am marking the issue as solved.
Offline
.dbus is for the regular dbus, arch uses dbus-broker now
Offline
https://www.merriam-webster.com/dictionary/coincidence
dbus-monitor won't fix anything.
Does
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames | grep -i authnow list the Authentication agent?
Offline
https://www.merriam-webster.com/dictionary/coincidence
dbus-monitor won't fix anything.Does
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames | grep -i authnow list the Authentication agent?
Yes, a monitor should not fix anything, I could not agree more!
I ran your dbus command: nothing at all is returned by it, neither on the now fixed system, nor on the good system.
Offline
.dbus is for the regular dbus, arch uses dbus-broker now
Thanks for that.
Offline
What is currently the output of
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames?
Offline
What is currently the output of
dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames?
~/ dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
method return time=1767905312.877838 sender=org.freedesktop.DBus -> destination=:1.104 serial=4294967295 reply_serial=2
array [
string "org.freedesktop.DBus"
string ":1.1"
string ":1.2"
string ":1.5"
string ":1.6"
string ":1.7"
string ":1.8"
string ":1.9"
string ":1.10"
string ":1.12"
string ":1.14"
string ":1.15"
string ":1.16"
string ":1.17"
string ":1.18"
string ":1.19"
string ":1.20"
string ":1.21"
string ":1.23"
string ":1.24"
string ":1.25"
string ":1.26"
string ":1.27"
string ":1.28"
string ":1.29"
string ":1.30"
string ":1.31"
string ":1.32"
string ":1.33"
string ":1.34"
string ":1.35"
string ":1.36"
string ":1.37"
string ":1.41"
string ":1.42"
string ":1.43"
string ":1.44"
string ":1.46"
string ":1.47"
string ":1.49"
string ":1.62"
string ":1.64"
string ":1.67"
string ":1.81"
string ":1.85"
string ":1.86"
string ":1.87"
string ":1.96"
string ":1.97"
string ":1.98"
string ":1.102"
string ":1.104"
string "ca.desrt.dconf"
string "org.a11y.Bus"
string "org.blueman.Applet"
string "org.freedesktop.FileManager1"
string "org.freedesktop.Notifications"
string "org.freedesktop.PowerManagement"
string "org.freedesktop.ReserveDevice1.Audio0"
string "org.freedesktop.network-manager-applet"
string "org.freedesktop.secrets"
string "org.freedesktop.systemd1"
string "org.gnome.keyring"
string "org.gtk.vfs.Daemon"
string "org.gtk.vfs.MTPVolumeMonitor"
string "org.gtk.vfs.Metadata"
string "org.gtk.vfs.UDisks2VolumeMonitor"
string "org.gtk.vfs.mountpoint_1763"
string "org.gtk.vfs.mountpoint_3150"
string "org.gtk.vfs.mountpoint_3203"
string "org.kde.StatusNotifierWatcher"
string "org.kde.kate-4866"
string "org.kde.kdeconnect"
string "org.kde.kdeconnect.daemon"
string "org.kdevelop.kdevelop-4453"
string "org.kdevelop.kdevplatform-lock-2cd43a36-a8bd-4f61-a231-100fca067b7f"
string "org.mozilla.firefox.L2hvbWUvYW50b25pby8ubW96aWxsYS9maXJlZm94LzV5bWNraWM3LmRlZmF1bHQ_"
string "org.pipewire.Telephony"
string "org.pulseaudio.Server"
string "org.xfce.FileManager"
string "org.xfce.Notifyd"
string "org.xfce.Panel"
string "org.xfce.PowerManager"
string "org.xfce.ScreenSaver"
string "org.xfce.SessionManager"
string "org.xfce.SettingsDaemon"
string "org.xfce.Thunar"
string "org.xfce.Xfconf"
string "org.xfce.mousepad"
string "org.xfce.orage"
]
~/
dbus-send --system --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames
method return time=1767905324.493781 sender=org.freedesktop.DBus -> destination=:1.65 serial=4294967295 reply_serial=2
array [
string "org.freedesktop.DBus"
string ":1.0"
string ":1.1"
string ":1.2"
string ":1.3"
string ":1.4"
string ":1.6"
string ":1.8"
string ":1.9"
string ":1.11"
string ":1.14"
string ":1.15"
string ":1.16"
string ":1.17"
string ":1.18"
string ":1.19"
string ":1.20"
string ":1.21"
string ":1.22"
string ":1.23"
string ":1.24"
string ":1.25"
string ":1.26"
string ":1.27"
string ":1.28"
string ":1.29"
string ":1.30"
string ":1.31"
string ":1.32"
string ":1.33"
string ":1.34"
string ":1.35"
string ":1.36"
string ":1.37"
string ":1.42"
string ":1.43"
string ":1.44"
string ":1.45"
string ":1.48"
string ":1.49"
string ":1.50"
string ":1.65"
string "com.redhat.NewPrinterNotification"
string "com.redhat.PrinterDriversInstaller"
string "net.psecure.pulse"
string "org.freedesktop.Accounts"
string "org.freedesktop.ColorManager"
string "org.freedesktop.ModemManager1"
string "org.freedesktop.NetworkManager"
string "org.freedesktop.PolicyKit1"
string "org.freedesktop.UDisks2"
string "org.freedesktop.UPower"
string "org.freedesktop.login1"
string "org.freedesktop.systemd1"
]
~/Offline
This looks up the PID for all registerered services and compares them w/ the pid of the gnome polkit agent - and ideally exposes it (if it's registering anonymously)
for iface in $(dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames | awk -F'"' '/string/{print $2}'); do
if (( $(dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.GetConnectionUnixProcessID 'string:'"$iface" 2>/dev/null | sed '/uint32/!d; s/^\s*uint32 //g') + 0 == $(pidof polkit-gnome-authentication-agent-1) )); then
echo $iface;
fi;
doneOffline
~/ for iface in $(dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.ListNames | awk -F'"' '/string/{print $2}'); do
if (( $(dbus-send --print-reply --dest=org.freedesktop.DBus /org/freedesktop/DBus org.freedesktop.DBus.GetConnectionUnixProcessID 'string:'"$iface" 2>/dev/null | sed '/uint32/!d; s/^\s*uint32 //g') + 0 == $(pidof polkit-gnome-authentication-agent-1) )); then
echo $iface;
fi;
done
:1.20Above for the now fixed system.
For the good system I get: “:1.18”
Offline