Bug 326126

Summary: Show explanation on how to change KDE wallet settings.
Product: [Applications] kwalletmanager Reporter: Markus <markuspg>
Component: generalAssignee: Valentin Rusu <valir>
Status: RESOLVED DOWNSTREAM    
Severity: wishlist CC: juanma_bellon, krejzi, roby.thomas, upscope
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: Kubuntu   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Markus 2013-10-17 07:18:47 UTC
When I try to disable the KDE wallet subsystem, I cannot apply the changed settings. I already read somewhere, that this is a new changed policy. Could you please display a message on how to change the setting additionally in the showing up box 'Sorry, the system security policy didn't allow you to save the changes.' or elsewhere?

Reproducible: Always

Steps to Reproduce:
1. Uncheck the 'Enable KDE wallet subsystem' checkbox
2. Press 'Apply' (Nothing happens)
3. Change for other module and click 'Apply' in the opening checkbox
Comment 1 Christoph Feck 2013-10-17 09:45:00 UTC
> "Sorry, the system security policy didn't allow you to save the changes."

Does not happen here, looks like a distribution-specific patch.
Comment 2 Russ Fineman 2013-12-30 17:44:46 UTC
I just ran into this. Having to rebuild my home director, tried to recreate my wallet,
Steps:
1. open walletmanager (kwalletmanager version 2.0)
2. Select settings --> configure wallet. 
    a. enable kde wallet subsystem --> new give wallet name, click ok.
   wallet name disappears
    b.  clicking apply asks for password, then error appears
.X Sorry, the system security policy didn't allow you to save changes.
3. same happens if try seperate password wallet. Tried on password when ask, does not take it same error.  Never asks for password during setup.
Additional error info
  action: Save wallet Configuration
 vendor; KDE Wallet System
 policy.subject-pid 7706
 pokicy.caller-pid 7709

Configuration:
openSUSE 13.1(Linux 3.11.6-4-desktop x86_64|
Intel(R) Quad Core(TM) i5-4440 CPU @ 3.10GHz|8GB DDR3|
GeForce 8400GS (NVIDIA-Linux-x86_64-331.20)|KDE 4.12.0

--
Russ
Comment 3 Armin K. 2014-04-24 13:59:27 UTC
I can confirm this.

KDE 4.13.0, Linux From Scratch, using systemd as init system.

This is recorded in journal after the error appears.

Apr 24 15:56:35 krejzi dbus[387]: [system] Activating service name='org.kde.kcontrol.kcmkwallet' (using servicehelper)
Apr 24 15:56:35 krejzi org.kde.kcontrol.kcmkwallet[16516]: QDBusConnection: system D-Bus connection created before QCoreApplication. Application may misbehave.
Apr 24 15:56:35 krejzi org.kde.kcontrol.kcmkwallet[16516]: Helper initialization failed
Apr 24 15:56:35 krejzi dbus[387]: [system] Activated service 'org.kde.kcontrol.kcmkwallet' failed: Launch helper exited with unknown return code 255
Apr 24 15:56:35 krejzi dbus[387]: [system] Activating service name='org.kde.kcontrol.kcmkwallet' (using servicehelper)
Apr 24 15:56:35 krejzi org.kde.kcontrol.kcmkwallet[16519]: QDBusConnection: system D-Bus connection created before QCoreApplication. Application may misbehave.
Apr 24 15:56:35 krejzi org.kde.kcontrol.kcmkwallet[16519]: Helper initialization failed
Apr 24 15:56:35 krejzi dbus[387]: [system] Activated service 'org.kde.kcontrol.kcmkwallet' failed: Launch helper exited with unknown return code 255
Comment 4 Armin K. 2014-04-24 14:06:12 UTC
I fixed my error. It was packaging error. kwalletmanager-4.13.0 didn't install DBus policy file /etc/dbus-1/system.d/org.kde.kcontrol.kcmkwallet.conf
Comment 5 Valentin Rusu 2014-04-24 22:09:11 UTC
(In reply to comment #4)
> I fixed my error. It was packaging error. kwalletmanager-4.13.0 didn't
> install DBus policy file
> /etc/dbus-1/system.d/org.kde.kcontrol.kcmkwallet.conf

That file should always be installed, if not KCM will not work.
Comment 6 Roby Thomas 2014-08-23 06:57:58 UTC
I had the same warning when attempting to enable KDE wallet subsystem in my Ubuntu 14.04.1 LTS. I felt it was all broken initially. Later turned out that polkit-kde-1 package wasn't installed. I did an 'apt-get install polkit-kde-1' and a restart got it all back to working. This seems to be a problem when KDE is separately installed at a later stage in Ubuntu.
Comment 7 Juanma 2015-09-01 17:13:43 UTC
I installed Debian from 'netinst' and I brought KDE later with aptitude. I have the above mentioned problem:
  "Sorry, the system security policy didn't allow you to save the changes."
I get that whenever I try to change any setting on "KDE Wallet Manager" GUI.

However, I do have '/etc/dbus-1/system.d/org.kde.kcontrol.kcmkwallet.conf' (mode 0644) and 'polkit-kde-1' is installed.

At least, I will try to fix it so that I don't have to enter the passphrase every time I need a password.
Comment 8 Valentin Rusu 2015-09-02 11:58:17 UTC
Well, the password is only needed when settings are changed, just like the message states it. That was added because of other users requesting it.

If you don't want to enter your passphrase each time a wallet is opened, then you have several options.
1. allow wallets to stay open during all the sesssion (see that in the settings)
2. install pam_kwallet
3. wait for ksecrets service to be releases, which will occur by the end of the year, I think :-)
Comment 9 Juanma 2015-09-03 10:07:53 UTC
Thanks, Valentin.

Installing pam_kwallet seems to be non-trivial (at least on Debian), so I won't touch it, as it would be my initiation with PAM. I don't dare. So I think I am going to allow wallets to remain open as long as possible while I wait for KSecrets.

However, there is still a problem with security policy which won't allow me to save my KWallet settings. Yes, there is a workaround, and I suppose it is not a bug in KWalletManager but, isn't it a bug somewhere else, like PolicyKit, or Debian's installation thereof?