My nm-applet does not authenticate me, although, in my understanding, it should. Trying to connect to a wifi network yields "Failed to add/activate connection, (32) Insufficient privileges." and the "edit" button is grayed out in the "edit connections..." menu. Reproducible: Always Steps to Reproduce: 1. run nm-applet as user 2. click "Edit connections" Actual Results: "Edit"-button is grayed out. Expected Results: It should let me edit the connection. I emerged Networkmanager 0.9.8.8 with USE="-consolekit -systemd". If I understand correctly, this should then fallback to policykit. I verified that my user is in the plugdev group and that my /usr/share/polkit-1/rules.d/01-org.freedesktop.NetworkManager.settings.modify.system.rules allows me (it's the default installed by the Networkmanager ebuild). Furthermore: # pkaction --action-id org.freedesktop.NetworkManager.network-control --verbose org.freedesktop.NetworkManager.network-control: description: Allow control of network connections message: System policy prevents control of network connections vendor: NetworkManager vendor_url: http://www.gnome.org/projects/NetworkManager icon: nm-icon implicit any: no implicit inactive: yes implicit active: yes and, with running nm-applet, my user can do: % pkcheck -a org.freedesktop.NetworkManager.network-control --process `pgrep nm-applet` && echo 'success' success
Oh I forgot: my networkmanager build log does show "policykit: yes (restrictive modify.system)"
Oh I realize that I was querying the wrong pkaction. I think it should be this: % pkcheck -a org.freedesktop.NetworkManager.settings.modify.system --process `pgrep nm-applet` && echo 'success' Not authorized. % pkaction -a org.freedesktop.NetworkManager.settings.modify.system --verbose org.freedesktop.NetworkManager.settings.modify.system: description: Modify network connections for all users message: System policy prevents modification of network settings for all users vendor: NetworkManager vendor_url: http://www.gnome.org/projects/NetworkManager icon: nm-icon implicit any: no implicit inactive: no implicit active: auth_admin_keep
so, with the help of iamben from #gentoo it was found that my Xsession was just enlightenment_start instead of the whole ck-launch ... dbus-launch ... whatnot stuff; and while the system had an active and local ck-session, there were two other inactive but local sessions (my TTY login (I use startx to run X) and some mysterious other session) that somehow must have confused consolekit in some more or less obscure way :) Long story short, nm-applet does what it should now; this can be closed on my account.
OK ;)
