Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extremely intermittent authentication issue. #906

Open
tparchambault opened this issue Sep 3, 2023 · 1 comment
Open

Extremely intermittent authentication issue. #906

tparchambault opened this issue Sep 3, 2023 · 1 comment

Comments

@tparchambault
Copy link
Contributor

This ticket is to capture an observed and known issue. The work-around is to send a SIGINT/Ctrl-C to terminate the registration attempts, and immediately attempt to invoke the fapolicy-analyzer again. I don't recall seeing two sequential invocation attempts failing.

I occasionally see the following dbus registration failure. Anecdotally, it has been observed <5% of the time. The issue may just be inherent in the underlying dbus implementation or its libraries, however it may be in the fapolicy-analyzer's wrapper script's interaction with the pkexec program and/or our use of the default authentication agent.

$ fapolicy-analyzer -a -v
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
^C
[toma@fedora Development]$ fapolicy-analyzer -a -v
pkttyagent registering on the dbus...
==== AUTHENTICATING FOR org.freedesktop.policykit.exec ====
Authentication is needed to run `/usr/bin/env' as the super user
Authenticating as: Thomas Archambault (toma)
Password: 
==== AUTHENTICATION COMPLETE ====
 Creating '/var/log/fapolicy-analyzer' 
@tparchambault
Copy link
Contributor Author

Datapoint:

pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
pkttyagent registering on the dbus...
^C

Observed the issue again. Checked if there were any audit.log or journalctl -f messages during these dbus comm failures. No output messages observed unfortunately.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant