<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">short answer:<div class="">i solved this problem by explicitly setting </div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>auth_unix_ro = “none” </div><div class=""><span class="Apple-tab-span" style="white-space:pre"> </span>auth_unix = “none”</div><div class="">in the libvirtd.conf file, and not using policy kit for access, but using standard unix permissions instead.</div><div class=""><br class=""></div><div class="">longer answer and request:</div><div class="">i first downloaded the source for libvirt and compiled it with bus support (—with-dbus) and installed and tested it. policy kit then works as it did before the change to the 1.2.x series libvirt.</div><div class=""><br class=""></div><div class="">i then went back and re-read the configuration option text in the libvirtd.conf file and snapped to the statement that if polkit was compiled in (which it is in version 1.2.10) then the default on the auth_unix directive will change from “none” as shown in the comment to “polkit”, which in libvirt 1.2.10 wants to use DBus, hence the error. explicitly setting the directive to “none” disables the polkit access control and solves the DBus error, although at the sacrifice of some fine grained control.</div><div class=""><br class=""></div><div class="">request:</div><div class="">since centos 6 has DBus support, can the maintainer of the libvirt package enable DBus support in the build, so we can use polkit access control?</div><div class=""><br class=""></div><div class="">thanks…</div><div class=""><br class=""></div><div class="">r.</div><div class=""> </div><div class=""><br class=""></div><div class=""> <br class=""><div><blockquote type="cite" class=""><div class="">On Mar 23, 2015, at 21:45, rgritzo <<a href="mailto:rgritzo@gmail.com" class="">rgritzo@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html charset=windows-1252" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class=""><div class="">this is the same problem that i started chasing back in january, and posted in the mailing list under the topic:</div><div class="">libvirt errors after applying RPMS from 2015:X002, last message in the thread is here:</div><div class=""><a href="http://lists.centos.org/pipermail/centos-virt/2015-February/004247.html" class="">http://lists.centos.org/pipermail/centos-virt/2015-February/004247.html</a></div></div><div class=""><br class=""></div><div class="">i have more information here, and am re-posting hoping to get some new insights.</div><div class=""><br class=""></div><div class=""><span class="">btw - this is on centos 6.6, kernel </span>3.10.68-11.el6.centos.alt.x86_64.</div><div class=""><br class=""></div><div class=""><span class="">i have a policy kit (.pkla) local authority file that should allow a specific user access to manage xen domains, but that seems to be failing</span>:</div><div class=""><br class=""></div><div class="">[user@centos ~]$ virsh -c <a href="xen:///" class="">xen:///</a><br class="">error: failed to connect to the hypervisor<br class="">error: internal error: DBus support not compiled into this binary<br class="">[user@centos ~]$ <br class=""><br class=""></div><div class="">this behavior started with the updates applied as a result of the 2015:x002 advisory.</div><div class=""><br class=""></div><div class="">after another day of troubleshooting, with an older machine that has not been patched side by side with the fully updated system, i think i have tracked it down to the update from libvirt-0.10.2.8-9.el6.centos.alt.x86_64 (and related dependencies) to libvirt-1.2.10-3.el6.x86_64. </div><div class=""><br class=""></div><div class="">it seems like with the older libvirt and virsh 0.10.2.8 the policy kit authority file would grant access to virsh to manage Dom0 and DomU just fine, but with the switch over to libvirt-1.2.10 (and virsh 1.2.10) something changed, and now not only does the policykit not work, but flags the ‘DBus support’ error above. running virsh with sudo, or as a privileged user, works just fine. but trying to run it as a non-privileged user, granting access through policy kit, fails.</div><div class=""><br class=""></div><div class="">in reviewing the changelogs for libvirt it seems that a patch was applied in late 2014 that changed the libvirt polkit code to use the DBusAPI instead of the pkcheck CLI helper - so i am guessing this is where the DBus reference in the error message comes in? this DBus API change was applied to libvirt 1.2.9, so i am assuming it came in with the upgrade to libvirt-1.2.10.</div><div class=""><br class=""></div><div class="">which brings me around full circle to the libvirtd error message - which is: </div><div class=""><br class=""></div><div class="">2015-03-24 02:51:36.550+0000: 5777: error : virDBusGetSystemBus:1742 : internal error: DBus support not compiled into this binary</div><div class=""><br class=""></div><div class="">i reviewed the build log for libvirt at <a href="http://cbs.centos.org/kojifiles/packages/libvirt/1.2.10/3.el6/data/logs/x86_64/build.log" class="">http://cbs.centos.org/kojifiles/packages/libvirt/1.2.10/3.el6/data/logs/x86_64/build.log</a> and indeed i see:</div><div class=""> configure: dbus: no </div><div class=""><br class=""></div><div class="">so that seems consistent.</div><div class=""><br class=""></div><div class="">i see some patches to libvirtd in august of 2013 that refer to the daemon having a fallback method for those systems that don’t support DBus.</div><div class=""><br class=""></div><div class="">is there some mechanism in libvirtd to allow the policy checks to work without dBus - and if so any ideas as to either </div><div class="">a) why they are not working, </div><div class="">b) how to enable / fix this?</div><div class=""><br class=""></div><div class="">thanks again for your patience on this…</div><div class=""><br class=""></div><div class="">r.</div><div class=""><br class=""></div><div class="">-- </div><div apple-content-edited="true" class=""><div class="">rgritzo at <a href="http://gmail.com/" class="">gmail.com</a></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></div></blockquote></div><br class=""><div apple-content-edited="true" class="">
<div class=""><div class="">-- </div><div class="">rgritzo at <a href="http://gmail.com" class="">gmail.com</a></div></div><div class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></div></body></html>