Providing non-Root Admin Users ability to override password policy

We are making use of Sun Directory Server 5.2.
Password policy has been implemented using CoS template definitions. As per the policy, the password minimum age (passwordMinAge) attribute is set to 24 hours, so as to restrict the user from frequently modifying his/her password.
However, we do not want to place this restriction or enforce this policy on the Admin user of our system.
We noticed the attribute passwordRootDNMayBypassModsChecks in the Directory Server documentation. But this attribute cannot be used, since our application does not use Root DN credentials to reset password.
So we would like to know if there is a way for non-Root DNs to over-ride password policy definitions?
TIA,
Chetan

You can create a administrative password policy and assign it to that particular user, else your global password policy will apply to all your users. I would assign this administrative password policy to the admin user, replication manager, and proxyagent

Similar Messages

In iPS 3.0SP3a, I would like to change the super-admin entry from root to a non-root user. The problem is I was able to install iPS as a pseudo-root however console will not let me in as that.

There must be a way to do this. Pls help.

Hi,
Please Check whether the said unix user is already existing under any roles of the default-domain.
If so, delete the user from that role in the default_domain and then
Goto : Manage Domain > view Domain Administrator Roles > Admin Role > users
Create the non root unix user name .
Once you create the user profile for this under the role defined for super admin,you can access as super admin.
Thanks,
Raj_indts
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support"

Access to reports in OIM to NON ADMIN user

HI all,
I need to give access to reports to a NON SYSTEM ADMIN user.
I created a group for him and gave access to the required menu items in the reports.
When I run the report as an admin, I could see the results but when I run it as the other user I don't.
Should I give him other permissions.
Thanks,
M

I'll start from Scratch:
Make User Group and Give menu item like Operational Reports and Historical Reports to that Group.
Click manage group > Select your group and Select Allowed Reports.
Select all those reports which you want to give permission to that user group.
Now depending upon the Reports you can give other access to that group.
Like There is a report group membership. For this you need extra permission to Organization. I mean to say you'll make that group as Administrative Group of that Organization for which you wanna give access.
Member of that group can view all the users but will not be allowed to edit any user profile.
Just to add one more thing:
If you want to modify any existing code no need to modify any JSP, just go to REP Table and select your report. You'll see one column there REP_META_DATA somthing, just modify that column.
Search for Clickable = "true" just make it "false"
COMMIT;
You are done. User will not see any hyperlink there.
Edited by: Rajiv Dewan

Applet does not run for non-admin users

When logged in as a normal user, our applet fails to run. When logged in as a local admin, the applet runs successfully. The client machine is running Windows XP and IE 8.
The java console contains this error message when it fails:
JNLPAppletLauncher.loadLibrary("jogl")
Exception in thread "AWT-EventQueue-3" java.lang.UnsatisfiedLinkError: jogl
at org.jdesktop.applet.util.JNLPAppletLaunc her.loadLibrary(JNLPAppletLauncher.java: 1922)
at sun.reflect.NativeMethodAccessorImpl.inv oke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.inv oke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl .invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.sun.opengl.impl.NativeLibLoader.load LibraryInternal(NativeLibLoader.java:174 )
at com.sun.opengl.impl.NativeLibLoader.acce ss$000(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$Defa ultAction.loadLibrary(NativeLibLoader.ja va:80)
at com.sun.opengl.impl.NativeLibLoader.load Library(NativeLibLoader.java:103)
at com.sun.opengl.impl.NativeLibLoader.acce ss$200(NativeLibLoader.java:49)
at com.sun.opengl.impl.NativeLibLoader$1.ru n(NativeLibLoader.java:111)
at java.security.AccessController.doPrivile ged(Native Method)
at com.sun.opengl.impl.NativeLibLoader.load Core(NativeLibLoader.java:109)
at com.sun.opengl.impl.windows.WindowsGLDra wableFactory.<clinit>(WindowsGLDrawableF actory.java:60)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at javax.media.opengl.GLDrawableFactory.get Factory(GLDrawableFactory.java:106)
at javax.media.opengl.GLCanvas.chooseGraphi csConfiguration(GLCanvas.java:520)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:131)
at javax.media.opengl.GLCanvas.<init>(GLCan vas.java:90)
at gov.nasa.worldwind.awt.WorldWindowGLCanv as.<init>(WorldWindowGLCanvas.java:50)
Java on Windows XP attempts to store the native libraries it downloads at C:\Documents and Settings\<USER>\Local Settings\Temp\
Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?
Thanks,
Jeremy

user11193214 wrote:
JNLPAppletLauncher.loadLibrary("jogl")
..Non local admin users do not have access to this folder. Is there any way to change the applet launcher so that it stores the native lib cache elsewhere?I don't know. One thing I do know is that the JNLPAppletLauncher since plug-in2 architecture JREs allow hooking into JNLP services. Try using web start to launch the applet.

Enter a password for the ADMIN user,Error in installing Oracle Apex,

hi, everybody,
Greetings,
Iam trying to install oracle Apex, By coming this step it shows this error, Could you Please help me to solve this error.
SQL> @apxchpwd.sql
Enter a value below for the password for the Application Express ADMIN user.
Enter a password for the ADMIN user []
Session altered.
...changing password for ADMIN
l_error_lines wwv_flow_global.vc_arr2;
ERROR at line 3:
ORA-06550: line 3, column 28:
PLS-00201: identifier 'WWV_FLOW_GLOBAL.VC_ARR2' must be declared
ORA-06550: line 3, column 28:
PL/SQL: Item ignored
ORA-06550: line 5, column 5:
PLS-00201: identifier 'WWV_FLOW_SECURITY.G_SECURITY_GROUP_ID' must be declared
ORA-06550: line 5, column 5:
PL/SQL: Statement ignored
ORA-06550: line 6, column 5:
PLS-00201: identifier 'WWV_FLOW_SECURITY.G_USER' must be declared
ORA-06550: line 6, column 5:
PL/SQL: Statement ignored
ORA-06550: line 7, column 5:
PLS-00201: identifier 'WWV_FLOW_SECURITY.G_IMPORT_IN_PROGRESS' must be declared
ORA-06550: line 7, column 5:
PL/SQL: Statement ignored
ORA-06550: line 15, column 31:
PLS-00201: identifier 'WWV_FLOW_SECURITY.STRONG_PASSWORD_VALIDATION' must be
declared
ORA-06550: line 15, column 5:
PL/SQL: Statement ignored
ORA-06550: line 22, column 35:
PLS-00201: identifier 'WWV_FLOW_UTILITIES.STRIPHTML' must be declared
ORA-06550: line 22, column 9:
PL/SQL: Statement ignored
ORA-06550: line 25, column 9:
PLS-00320: the declaration of the type o

suresh.m2015,
It's going to be impossible for anyone in this forum to help with your issue if you don't provide any more detail about your environment and Apex installation. However, from your post it looks like the Apex database objects are missing or invalid.
Did you follow the Apex installation guide step by step? For example, did you run apexins.sql?
It's important to follow the documentation. The script you are running to change the admin user password should not be run until after the Apex installation is complete.
--Keith Malay

Enabling Silent Auto-update in Java 7.45 as a non-local administrator user, enterprise best practices?

So I have been looking through forums, java help, and everywhere possible for more insight on java in an enterprise environment. What I have found so
far is that there is no actual way to enable auto updates to install as a non-local admin user.
I know you can turn on and off updates My company wants to install java JRE as a silent-autoupdate "always update" kind of installation, but all my users are domain users, without admin rights. When it finds an update - it prompts for credentials and obviously they are denied. Is this even possible? If it is not possible to "auto-update" non local admins, I can make the case to management that java releases need to be QA'd and controlled releases. My environment is adminstudio/installshield and SCCM. I know auto-installing updates to java without QA per version , in a enterprise environment, is not good practice, but its not my decision right now.
thank you very much!

Hi and thank you very much for responding!
I'd be interested in further answers:
Our company is developing unsigned applets ...Why?Sufficient functionality. We dont want to e. g. access the customers local file system, we just wanted to use the applet as viewer sending data to and from the server where the applet was loaded from. Nothing else.
1. What is the idea to show messages for unsigned applets running in a secure sandbox.. why when running in a sandbox, and why not also for potentially more dangerous signed applets?With a signed applet you know who is taking the responsibility.With unsigned applets, I rely on the sandbox responsibility. I actually couldn't do anything dangerous by accident.
With signed applets, I'm fully responsible that nothing bad happens to the clients data. Preventing this is the main task for the java sandbox, so why not use it?
Just to clarify: Is it right that each signed applet has full access rights?
3. Is there any recommended strategy to sign an applet to work across browsers, platforms, JRE versions?Err, sign it?Does the signing scheme matter? According to http://mindprod.com/jgloss/signedapplets.html, there are lots of...
Could you recommend a good tutorial? I'm an absolute beginner concerning signing of applets.
4. Are there negative side-effects to sign an applet?Only that it forces you to sign all its components. Not sure what this question means.What about loading time and jar filesize?
Does JarIndex work with multiple signed modular applet jars?
Must javascript code also be signed to talk to signed applets?
Is a client able to see a signed applet a) without see or interact with a confirmation window and b) without doing any prerequisites (like adding certificates or similar)?
Thanks, Peter

How nonSystem Admin user can make proxy to him/her self to System Admin usr

How non System Admin user can make proxy to him/her self to System Admin user??

What it means, do you ant to make System Admin as a proxy user of any non adin user.
Go to proxy tab then you can select any user from there. AFAIK, user can make proxy to any user (including system admin).
I don have machine, please check and let me know. Otherwise you ave the APIs too for this.
API
Look at SetProxyForUser API

Unix: How do I start weblogic as root, yet have owned by non-root uid

I have a weblogic domain that used to be started by a non-root unix user, we
now wish to have this domain
started by the user "root" as we are using ports < 1024.
[Q] What do I have to do to achieve this ?
[Q] Which files will need to be owned by root ?
Weblogic documentation isn't clear on this.

http://e-docs.bea.com/wls/docs81/ConsoleHelp/machines.html
Does that answer it?
mbg
"Tarang" <[email protected]> wrote in message
news:3e7fc4cc$[email protected]..
>
>
I have a weblogic domain that used to be started by a non-root unixuser, we
now wish to have this domain
started by the user "root" as we are using ports < 1024.
[Q] What do I have to do to achieve this ?
[Q] Which files will need to be owned by root ?
Weblogic documentation isn't clear on this.

OS 10.4 - Major Shortname/Admin/User Problem

I've never quite screwed anything up this bad before. For now, let's try not to concentrate on WHY I did these things... just that they're already done... and I severely regret them.
This is my work computer, which also holds many personal files.
I am running 10.4.11 on a G5 PowerPC
There was only ever one user account on the machine.
I went to change the short name using Netinfo Manager.
I changed the "name" and "home" to reflect the changes I wanted.
For the sake of this example, let's say the original name was "WORK" and I changed it to "Coz". So, "home" is now labeled as "/Users/Coz"
This of course wiped out the profile I've been using all along, created what appears to be a new Home account by the name of "Coz" and no other user can be selected at startup. In Preferences/Accounts, there's only this one -- and it's a Standard User. I have no admin rights because there appears to not be an admin password/name anymore.
But...
I can see my old files and everything still exist in the directory "/Users/WORK" -- yay. they're where they're supposed to be.
I just need to get WORK to be considered the home account again and make sure it's got admin rights. But that's hard to do when no one has admin rights at the moment.
Puhleez. Help.

Ive looked at most of these before - and they all seem to not quite be helpful enough, or too confusing to make sense of. Or, the suggestion didn't work for me. I'll look through again, though.
_edit: after looking through, here's why these suggestions cannot help me:
+How to change user short name or home directory name+
+http://support.apple.com/kb/HT1428?viewlocale=en_US+
*Doesn't apply. It's already changed, I need to change it back... but I need admin rights. I did try the command "chown -R NEWNAME /Users/NEWNAME" but that didn't seem to do anything at all.*
+Also, this might be useful:+
+http://www.macworld.com/article/132693/2008/03/changeshortusername.html+
*Attempted to use ChangeShortName app but cannot without admin rights.*
+Apparent 'Loss' of Home Folder:+
+http://docs.info.apple.com/article.html?artnum=107854+
*Home folder isn't lost, it's just set for a new user.*
+Changing or resetting an account password+
+http://support.apple.com/kb/HT1274?viewlocale=en_US+
*Can be done, but doesn't help me any.*
+Changing your administrator password+
+http://docs.info.apple.com/article.html?path=Mac/10.4/en/mh655.html+
*You must know the current password. Or, if not, reset it using boot disc.*
*But this doesn't help because there is no admin-user to reset the password for.*

Users Unable to Change Password

Small Business 2011 Standard with Windows 7 Pro workstations - all fully updated.
We have an issue where none of the users can change their passwords. They receive a message saying that the password
doesn't meet the length, complexity or history requirements of the domain.
I know (at least in my case) that the password hasn't been used before and there is no problem with the length
and complexity. I've even tried switching off the password policies in the SBS Console with no success.
Apart from the SBS Console is there anywhere else I should be looking that has a higher priority than the console?
TIA

We are using SBS 2008 (SP2), and we too are having this problem. Have done all the necessary GP changes. Have done gpupdate /force. As test user, I seem to be unable to change password at all (originally "minimum age" was 1 day, if that is somehow
still in force might explain why); my end user has waited longer than that, she reports she can change her password but never back to anything in her history (original default was, I think, 24 passwords, might explain).
While rsop on domain and clients/rdc shows:
Policy Policy Setting
Enforce password history 0 passwords remembered
Maximum password age 42 days
Minimum password age 0 days
Minimum password length 0 characters
Password must meet complexity requirements Disabled
Store passwords using reversible encryption Disabled
Anybody any ideas now??? :(
EDIT: Hmmm, net accounts /domain gives me:
Force user logoff how long after time expires?: Never
Minimum password age (days): 2
Maximum password age (days): Unlimited
Minimum password length: 0
Length of password history maintained: 24
Lockout threshold: 50
Lockout duration (minutes): 10
Lockout observation window (minutes): 10
Computer role: PRIMARY
The command completed successfully.
Those settings would explain my problem, then!
I can see that net accounts will allow me to alter this stuff, from the command-line, I guess that is what I need to do?
NET ACCOUNTS
[/FORCELOGOFF:{minutes | NO}]
[/MINPWLEN:length]
[/MAXPWAGE:{days | UNLIMITED}]
[/MINPWAGE:days]
[/UNIQUEPW:number]
[/DOMAIN]

Running admin server user as non-root

Hi All,
I have a requirement to run admin server user as non-root. Is this possible and how to go about it.
giovi

Web Server traditionally runs with a process parentage something like:
Admin Server -> WatchDog -> Primordial Process -> Worker Process
The Worker Process runs with the UID specified in the configuration (nobody, webservd, etc). This is the process that is actually doing the work of being a web server.
The Primordial Process typically runs with the UID specified in teh configuration. The primordial process never handles requests. Its role is to quickly create replacement worker processes if the worker process unexpectedly terminates.
The WatchDog process typically runs with privileged (read "root") access in order to be able to bind to the privileged ports of the OS (any port below 1024). Without privileged access no bind can occur. Once the Watchdog performs the bind it creates the Primordial process, delegates ownership of the port, etc. From then on its role is to watch for unexpected termination of the Primordial process and, if needed, create a new one.
The Admin server is an optional part of the configuration. When used, it also needs to have the necessary rights to bind to the privileged ports.
So then - the only way to allow the Admin Server or the Watchdog run non-privileged and still be able to perform their jobs is to loosen the restrictions on the privileged ports themselves. On Solaris 10 you could do this with:
# usermod -K defaultpriv=basic,net_privaddr webservd
Then become webservd and start the process.
Note that the Admin Server's UID is set in admin-serv/config/server.xml (there may be a screen for this in the GUI). Look for the <user>root</user> element.

Majority of reports missing for non admin users

I have followed the instructions here (SCCM 2012–Reporting in console for non-admins (Reporting User Role) v2) to allow non admin users the ability to view
reports in the console. So far, so good. However, when viewing the reports with the non admin user, only about 100 of the 400+ reports appear.
Am I missing something here?

The custom reporting one in the link I provided, and also modified versions of the following:
OS Deployment manager (removed rights to All driver related items (drivers and driver packages), Boot image packages (except read access), Operating system installation packages).
Application Administrator (removed Application>Approve; Distribition Point>Set Security Scope; Distribution Point Group>Set Security Scope; Global Condition>Set Security Scope)
The reports missing we care about primarily are Software ones (companies and products and files).

[SOLVED] Xorg not starting on non-root user [My First Linux]

Hello, I recently turned back to linux after digging up my old ASUS EEE 900a, which I messed up with partitioning fun after trying to cram Windows XP on it and etc. Anyways, I managed to fix it, and after Ubuntu being too big, I was turned on to Arch as a good distro, and I've been having a very good time setting everything up so far.
Anyways: My issue arises after needing to use a different user in order to use Chrome. I created a new account and tried to run startx like I usually do. It spat out the usual few lines, but failed and gave me this log:
[ 4616.974]
X.Org X Server 1.14.1
Release Date: 2013-04-17
[ 4616.974] X Protocol Version 11, Revision 0
[ 4616.974] Build Operating System: Linux 3.8.7-1-ARCH i686
[ 4616.974] Current Operating System: Linux archieee 3.9.4-1-ARCH #1 SMP PREEMPT Sun May 26 11:56:48 CEST 2013 i686
[ 4616.975] Kernel command line: root=/dev/sda1 ro initrd=../initramfs-linux.img BOOT_IMAGE=../vmlinuz-linux
[ 4616.975] Build Date: 17 April 2013 02:43:06PM
[ 4616.975]
[ 4616.975] Current version of pixman: 0.30.0
[ 4616.975] Before reporting problems, check http://wiki.x.org
to make sure that you have the latest version.
[ 4616.975] Markers: (--) probed, (**) from config file, (==) default setting,
(++) from command line, (!!) notice, (II) informational,
(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
[ 4616.977] (==) Log file: "/var/log/Xorg.0.log", Time: Tue Jun 4 21:56:02 2013
[ 4616.977] (==) Using config directory: "/etc/X11/xorg.conf.d"
[ 4616.978] (==) No Layout section. Using the first Screen section.
[ 4616.978] (==) No screen section available. Using defaults.
[ 4616.978] (**) |-->Screen "Default Screen Section" (0)
[ 4616.978] (**) | |-->Monitor "<default monitor>"
[ 4616.978] (==) No monitor specified for screen "Default Screen Section".
Using a default monitor configuration.
[ 4616.978] (==) Automatically adding devices
[ 4616.978] (==) Automatically enabling devices
[ 4616.978] (==) Automatically adding GPU devices
[ 4616.978] (WW) The directory "/usr/share/fonts/OTF/" does not exist.
[ 4616.978] Entry deleted from font path.
[ 4616.978] (WW) The directory "/usr/share/fonts/Type1/" does not exist.
[ 4616.978] Entry deleted from font path.
[ 4616.978] (WW) `fonts.dir' not found (or not valid) in "/usr/share/fonts/100dpi/".
[ 4616.978] Entry deleted from font path.
[ 4616.978] (Run 'mkfontdir' on "/usr/share/fonts/100dpi/").
[ 4616.979] (WW) `fonts.dir' not found (or not valid) in "/usr/share/fonts/75dpi/".
[ 4616.979] Entry deleted from font path.
[ 4616.979] (Run 'mkfontdir' on "/usr/share/fonts/75dpi/").
[ 4616.979] (==) FontPath set to:
/usr/share/fonts/misc/,
/usr/share/fonts/TTF/
[ 4616.979] (==) ModulePath set to "/usr/lib/xorg/modules"
[ 4616.979] (II) The server relies on udev to provide the list of input devices.
If no devices become available, reconfigure udev or disable AutoAddDevices.
[ 4616.979] (II) Loader magic: 0x8258620
[ 4616.979] (II) Module ABI versions:
[ 4616.979] X.Org ANSI C Emulation: 0.4
[ 4616.979] X.Org Video Driver: 14.1
[ 4616.979] X.Org XInput driver : 19.1
[ 4616.979] X.Org Server Extension : 7.0
[ 4616.980] (II) config/udev: Adding drm device (/dev/dri/card0)
[ 4616.983] (--) PCI:*(0:0:2:0) 8086:27ae:1043:8340 rev 3, Mem @ 0xf3e00000/524288, 0xd0000000/268435456, 0xf3dc0000/262144, I/O @ 0x0000cc00/8
[ 4616.983] (--) PCI: (0:0:2:1) 8086:27a6:1043:8340 rev 3, Mem @ 0xf3e80000/524288
[ 4616.983] Initializing built-in extension Generic Event Extension
[ 4616.983] Initializing built-in extension SHAPE
[ 4616.984] Initializing built-in extension MIT-SHM
[ 4616.984] Initializing built-in extension XInputExtension
[ 4616.984] Initializing built-in extension XTEST
[ 4616.984] Initializing built-in extension BIG-REQUESTS
[ 4616.984] Initializing built-in extension SYNC
[ 4616.984] Initializing built-in extension XKEYBOARD
[ 4616.984] Initializing built-in extension XC-MISC
[ 4616.985] Initializing built-in extension SECURITY
[ 4616.985] Initializing built-in extension XINERAMA
[ 4616.987] Initializing built-in extension XFIXES
[ 4616.990] Initializing built-in extension RENDER
[ 4616.993] Initializing built-in extension RANDR
[ 4616.995] Initializing built-in extension COMPOSITE
[ 4616.998] Initializing built-in extension DAMAGE
[ 4617.000] Initializing built-in extension MIT-SCREEN-SAVER
[ 4617.003] Initializing built-in extension DOUBLE-BUFFER
[ 4617.005] Initializing built-in extension RECORD
[ 4617.007] Initializing built-in extension DPMS
[ 4617.010] Initializing built-in extension X-Resource
[ 4617.012] Initializing built-in extension XVideo
[ 4617.015] Initializing built-in extension XVideo-MotionCompensation
[ 4617.017] Initializing built-in extension XFree86-VidModeExtension
[ 4617.019] Initializing built-in extension XFree86-DGA
[ 4617.021] Initializing built-in extension XFree86-DRI
[ 4617.023] Initializing built-in extension DRI2
[ 4617.023] (II) LoadModule: "glx"
[ 4617.024] (II) Loading /usr/lib/xorg/modules/extensions/libglx.so
[ 4617.024] (II) Module glx: vendor="X.Org Foundation"
[ 4617.024] compiled for 1.14.1, module version = 1.0.0
[ 4617.024] ABI class: X.Org Server Extension, version 7.0
[ 4617.024] (==) AIGLX enabled
[ 4617.026] Loading extension GLX
[ 4617.026] (==) Matched intel as autoconfigured driver 0
[ 4617.026] (==) Matched intel as autoconfigured driver 1
[ 4617.026] (==) Matched vesa as autoconfigured driver 2
[ 4617.026] (==) Matched modesetting as autoconfigured driver 3
[ 4617.026] (==) Matched fbdev as autoconfigured driver 4
[ 4617.026] (==) Assigned the driver to the xf86ConfigLayout
[ 4617.026] (II) LoadModule: "intel"
[ 4617.026] (II) Loading /usr/lib/xorg/modules/drivers/intel_drv.so
[ 4617.027] (II) Module intel: vendor="X.Org Foundation"
[ 4617.027] compiled for 1.14.1, module version = 2.21.8
[ 4617.027] Module class: X.Org Video Driver
[ 4617.027] ABI class: X.Org Video Driver, version 14.1
[ 4617.027] (II) LoadModule: "vesa"
[ 4617.027] (II) Loading /usr/lib/xorg/modules/drivers/vesa_drv.so
[ 4617.028] (II) Module vesa: vendor="X.Org Foundation"
[ 4617.028] compiled for 1.14.0, module version = 2.3.2
[ 4617.028] Module class: X.Org Video Driver
[ 4617.028] ABI class: X.Org Video Driver, version 14.1
[ 4617.028] (II) LoadModule: "modesetting"
[ 4617.029] (WW) Warning, couldn't open module modesetting
[ 4617.029] (II) UnloadModule: "modesetting"
[ 4617.029] (II) Unloading modesetting
[ 4617.029] (EE) Failed to load module "modesetting" (module does not exist, 0)
[ 4617.029] (II) LoadModule: "fbdev"
[ 4617.029] (WW) Warning, couldn't open module fbdev
[ 4617.029] (II) UnloadModule: "fbdev"
[ 4617.030] (II) Unloading fbdev
[ 4617.030] (EE) Failed to load module "fbdev" (module does not exist, 0)
[ 4617.030] (II) intel: Driver for Intel Integrated Graphics Chipsets: i810,
i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G, 915G,
E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM, Pineview G,
965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33, GM45,
4 Series, G45/G43, Q45/Q43, G41, B43, B43, Clarkdale, Arrandale,
Sandybridge Desktop (GT1), Sandybridge Desktop (GT2),
Sandybridge Desktop (GT2+), Sandybridge Mobile (GT1),
Sandybridge Mobile (GT2), Sandybridge Mobile (GT2+),
Sandybridge Server, Ivybridge Mobile (GT1), Ivybridge Mobile (GT2),
Ivybridge Desktop (GT1), Ivybridge Desktop (GT2), Ivybridge Server,
Ivybridge Server (GT2), Haswell Desktop (GT1), Haswell Desktop (GT2),
Haswell Desktop (GT3), Haswell Mobile (GT1), Haswell Mobile (GT2),
Haswell Mobile (GT3), Haswell Server (GT1), Haswell Server (GT2),
Haswell Server (GT3), Haswell (GT1), Haswell (GT2), Haswell (GT3),
Haswell (GT1), Haswell (GT2), Haswell (GT3),
Haswell SDV Desktop (GT1), Haswell SDV Desktop (GT2),
Haswell SDV Desktop (GT3), Haswell SDV Mobile (GT1),
Haswell SDV Mobile (GT2), Haswell SDV Mobile (GT3),
Haswell SDV Server (GT1), Haswell SDV Server (GT2),
Haswell SDV Server (GT3), Haswell SDV (GT1), Haswell SDV (GT2),
Haswell SDV (GT3), Haswell SDV (GT1), Haswell SDV (GT2),
Haswell SDV (GT3), Haswell ULT Desktop (GT1),
Haswell ULT Desktop (GT2), Haswell ULT Desktop (GT3),
Haswell ULT Mobile (GT1), Haswell ULT Mobile (GT2),
Haswell ULT Mobile (GT3), Haswell ULT Server (GT1),
Haswell ULT Server (GT2), Haswell ULT Server (GT3),
Haswell ULT (GT1), Haswell ULT (GT2), Haswell ULT (GT3),
Haswell ULT (GT1), Haswell ULT (GT2), Haswell ULT (GT3),
Haswell CRW Desktop (GT1), Haswell CRW Desktop (GT2),
Haswell CRW Desktop (GT3), Haswell CRW Mobile (GT1),
Haswell CRW Mobile (GT2), Haswell CRW Mobile (GT3),
Haswell CRW Server (GT1), Haswell CRW Server (GT2),
Haswell CRW Server (GT3), Haswell CRW (GT1), Haswell CRW (GT2),
Haswell CRW (GT3), Haswell CRW (GT1), Haswell CRW (GT2),
Haswell CRW (GT3), ValleyView PO board
[ 4617.032] (II) VESA: driver for VESA chipsets: vesa
[ 4617.032] (++) using VT number 1
[ 4617.033] (WW) Falling back to old probe method for vesa
[ 4617.033] (II) intel(0): Creating default Display subsection in Screen section
"Default Screen Section" for depth/fbbpp 24/32
[ 4617.034] (==) intel(0): Depth 24, (--) framebuffer bpp 32
[ 4617.034] (==) intel(0): RGB weight 888
[ 4617.034] (==) intel(0): Default visual is TrueColor
[ 4617.034] (--) intel(0): Integrated Graphics Chipset: Intel(R) 945GME
[ 4617.034] (**) intel(0): Relaxed fencing disabled
[ 4617.034] (**) intel(0): Wait on SwapBuffers? enabled
[ 4617.034] (**) intel(0): Triple buffering? enabled
[ 4617.034] (**) intel(0): Framebuffer tiled
[ 4617.034] (**) intel(0): Pixmaps tiled
[ 4617.034] (**) intel(0): 3D buffers tiled
[ 4617.034] (**) intel(0): SwapBuffers wait enabled
[ 4617.034] (==) intel(0): video overlay key set to 0x101fe
[ 4617.034] (II) intel(0): Output LVDS1 has no monitor section
[ 4617.035] (--) intel(0): found backlight control interface /sys/class/backlight/eeepc
[ 4617.066] (II) intel(0): Output VGA1 has no monitor section
[ 4617.067] (II) intel(0): EDID for output LVDS1
[ 4617.067] (II) intel(0): Not using default mode "320x240" (doublescan mode not supported)
[ 4617.067] (II) intel(0): Not using default mode "400x300" (doublescan mode not supported)
[ 4617.067] (II) intel(0): Not using default mode "400x300" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Not using default mode "512x384" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Not using default mode "640x480" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Not using default mode "640x512" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Not using default mode "800x600" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Not using default mode "700x525" (doublescan mode not supported)
[ 4617.068] (II) intel(0): Printing probed modes for output LVDS1
[ 4617.068] (II) intel(0): Modeline "1024x600"x60.0 45.00 1024 1077 1112 1200 600 604 609 625 -hsync -vsync (37.5 kHz P)
[ 4617.068] (II) intel(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz d)
[ 4617.068] (II) intel(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz d)
[ 4617.068] (II) intel(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz d)
[ 4617.100] (II) intel(0): EDID for output VGA1
[ 4617.100] (II) intel(0): Output LVDS1 connected
[ 4617.100] (II) intel(0): Output VGA1 disconnected
[ 4617.100] (II) intel(0): Using exact sizes for initial modes
[ 4617.100] (II) intel(0): Output LVDS1 using initial mode 1024x600
[ 4617.100] (II) intel(0): Using default gamma of (1.0, 1.0, 1.0) unless otherwise stated.
[ 4617.100] (II) intel(0): Kernel page flipping support detected, enabling
[ 4617.100] (==) intel(0): DPI set to (96, 96)
[ 4617.100] (II) Loading sub module "fb"
[ 4617.100] (II) LoadModule: "fb"
[ 4617.101] (II) Loading /usr/lib/xorg/modules/libfb.so
[ 4617.102] (II) Module fb: vendor="X.Org Foundation"
[ 4617.103] compiled for 1.14.1, module version = 1.0.0
[ 4617.103] ABI class: X.Org ANSI C Emulation, version 0.4
[ 4617.103] (II) Loading sub module "dri2"
[ 4617.103] (II) LoadModule: "dri2"
[ 4617.103] (II) Module "dri2" already built-in
[ 4617.103] (II) UnloadModule: "vesa"
[ 4617.103] (II) Unloading vesa
[ 4617.103] (==) Depth 24 pixmap format is 32 bpp
[ 4617.104] (II) intel(0): [DRI2] Setup complete
[ 4617.104] (II) intel(0): [DRI2] DRI driver: i915
[ 4617.104] (II) intel(0): Allocated new frame buffer 1024x600 stride 4096, tiled
[ 4617.104] (II) UXA(0): Driver registered support for the following operations:
[ 4617.104] (II) solid
[ 4617.104] (II) copy
[ 4617.104] (II) composite (RENDER acceleration)
[ 4617.104] (II) put_image
[ 4617.105] (II) get_image
[ 4617.105] (==) intel(0): Backing store disabled
[ 4617.105] (==) intel(0): Silken mouse enabled
[ 4617.105] (II) intel(0): Initializing HW Cursor
[ 4617.105] (II) intel(0): RandR 1.2 enabled, ignore the following RandR disabled message.
[ 4617.113] (==) intel(0): DPMS enabled
[ 4617.113] (==) intel(0): Intel XvMC decoder disabled
[ 4617.113] (II) intel(0): Set up textured video
[ 4617.113] (II) intel(0): Set up overlay video
[ 4617.113] (II) intel(0): direct rendering: DRI2 Enabled
[ 4617.113] (==) intel(0): hotplug detection: "enabled"
[ 4617.123] (--) RandR disabled
[ 4617.160] (II) AIGLX: enabled GLX_MESA_copy_sub_buffer
[ 4617.160] (II) AIGLX: enabled GLX_INTEL_swap_event
[ 4617.160] (II) AIGLX: enabled GLX_ARB_create_context
[ 4617.160] (II) AIGLX: enabled GLX_ARB_create_context_profile
[ 4617.160] (II) AIGLX: enabled GLX_EXT_create_context_es2_profile
[ 4617.160] (II) AIGLX: enabled GLX_SGI_swap_control and GLX_MESA_swap_control
[ 4617.160] (II) AIGLX: GLX_EXT_texture_from_pixmap backed by buffer objects
[ 4617.160] (II) AIGLX: Loaded and initialized i915
[ 4617.160] (II) GLX: Initialized DRI2 GL provider for screen 0
[ 4617.162] (II) intel(0): Setting screen physical size to 270 x 158
[ 4617.278] (II) config/udev: Adding input device Power Button (/dev/input/event4)
[ 4617.278] (**) Power Button: Applying InputClass "evdev keyboard catchall"
[ 4617.278] (II) LoadModule: "evdev"
[ 4617.278] (II) Loading /usr/lib/xorg/modules/input/evdev_drv.so
[ 4617.279] (II) Module evdev: vendor="X.Org Foundation"
[ 4617.279] compiled for 1.14.0, module version = 2.8.0
[ 4617.279] Module class: X.Org XInput Driver
[ 4617.279] ABI class: X.Org XInput driver, version 19.1
[ 4617.279] (II) Using input driver 'evdev' for 'Power Button'
[ 4617.279] (**) Power Button: always reports core events
[ 4617.279] (**) evdev: Power Button: Device: "/dev/input/event4"
[ 4617.279] (--) evdev: Power Button: Vendor 0 Product 0x1
[ 4617.279] (--) evdev: Power Button: Found keys
[ 4617.279] (II) evdev: Power Button: Configuring as keyboard
[ 4617.279] (**) Option "config_info" "udev:/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input4/event4"
[ 4617.279] (II) XINPUT: Adding extended input device "Power Button" (type: KEYBOARD, id 6)
[ 4617.279] (**) Option "xkb_rules" "evdev"
[ 4617.280] (**) Option "xkb_model" "evdev"
[ 4617.280] (**) Option "xkb_layout" "us"
[ 4617.363] (II) config/udev: Adding input device Video Bus (/dev/input/event7)
[ 4617.363] (**) Video Bus: Applying InputClass "evdev keyboard catchall"
[ 4617.363] (II) Using input driver 'evdev' for 'Video Bus'
[ 4617.363] (**) Video Bus: always reports core events
[ 4617.363] (**) evdev: Video Bus: Device: "/dev/input/event7"
[ 4617.363] (--) evdev: Video Bus: Vendor 0 Product 0x6
[ 4617.364] (--) evdev: Video Bus: Found keys
[ 4617.364] (II) evdev: Video Bus: Configuring as keyboard
[ 4617.364] (**) Option "config_info" "udev:/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input7/event7"
[ 4617.364] (II) XINPUT: Adding extended input device "Video Bus" (type: KEYBOARD, id 7)
[ 4617.364] (**) Option "xkb_rules" "evdev"
[ 4617.364] (**) Option "xkb_model" "evdev"
[ 4617.364] (**) Option "xkb_layout" "us"
[ 4617.365] (II) config/udev: Adding input device Power Button (/dev/input/event3)
[ 4617.365] (**) Power Button: Applying InputClass "evdev keyboard catchall"
[ 4617.365] (II) Using input driver 'evdev' for 'Power Button'
[ 4617.366] (**) Power Button: always reports core events
[ 4617.366] (**) evdev: Power Button: Device: "/dev/input/event3"
[ 4617.366] (--) evdev: Power Button: Vendor 0 Product 0x1
[ 4617.366] (--) evdev: Power Button: Found keys
[ 4617.366] (II) evdev: Power Button: Configuring as keyboard
[ 4617.366] (**) Option "config_info" "udev:/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input3/event3"
[ 4617.366] (II) XINPUT: Adding extended input device "Power Button" (type: KEYBOARD, id 8)
[ 4617.366] (**) Option "xkb_rules" "evdev"
[ 4617.366] (**) Option "xkb_model" "evdev"
[ 4617.366] (**) Option "xkb_layout" "us"
[ 4617.368] (II) config/udev: Adding input device Lid Switch (/dev/input/event1)
[ 4617.368] (II) No input driver specified, ignoring this device.
[ 4617.368] (II) This device may have been added with another device file.
[ 4617.369] (II) config/udev: Adding input device Sleep Button (/dev/input/event2)
[ 4617.369] (**) Sleep Button: Applying InputClass "evdev keyboard catchall"
[ 4617.369] (II) Using input driver 'evdev' for 'Sleep Button'
[ 4617.369] (**) Sleep Button: always reports core events
[ 4617.369] (**) evdev: Sleep Button: Device: "/dev/input/event2"
[ 4617.369] (--) evdev: Sleep Button: Vendor 0 Product 0x3
[ 4617.369] (--) evdev: Sleep Button: Found keys
[ 4617.369] (II) evdev: Sleep Button: Configuring as keyboard
[ 4617.369] (**) Option "config_info" "udev:/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input2/event2"
[ 4617.369] (II) XINPUT: Adding extended input device "Sleep Button" (type: KEYBOARD, id 9)
[ 4617.369] (**) Option "xkb_rules" "evdev"
[ 4617.369] (**) Option "xkb_model" "evdev"
[ 4617.369] (**) Option "xkb_layout" "us"
[ 4617.370] (II) config/udev: Adding drm device (/dev/dri/card0)
[ 4617.371] (II) config/udev: Adding input device HDA Intel Mic (/dev/input/event8)
[ 4617.372] (II) No input driver specified, ignoring this device.
[ 4617.372] (II) This device may have been added with another device file.
[ 4617.372] (II) config/udev: Adding input device HDA Intel Headphone (/dev/input/event9)
[ 4617.372] (II) No input driver specified, ignoring this device.
[ 4617.372] (II) This device may have been added with another device file.
[ 4617.373] (II) config/udev: Adding input device Asus EeePC extra buttons (/dev/input/event5)
[ 4617.373] (**) Asus EeePC extra buttons: Applying InputClass "evdev keyboard catchall"
[ 4617.373] (II) Using input driver 'evdev' for 'Asus EeePC extra buttons'
[ 4617.373] (**) Asus EeePC extra buttons: always reports core events
[ 4617.373] (**) evdev: Asus EeePC extra buttons: Device: "/dev/input/event5"
[ 4617.374] (--) evdev: Asus EeePC extra buttons: Vendor 0 Product 0
[ 4617.374] (--) evdev: Asus EeePC extra buttons: Found keys
[ 4617.374] (II) evdev: Asus EeePC extra buttons: Configuring as keyboard
[ 4617.374] (**) Option "config_info" "udev:/sys/devices/platform/eeepc/input/input5/event5"
[ 4617.374] (II) XINPUT: Adding extended input device "Asus EeePC extra buttons" (type: KEYBOARD, id 10)
[ 4617.374] (**) Option "xkb_rules" "evdev"
[ 4617.374] (**) Option "xkb_model" "evdev"
[ 4617.374] (**) Option "xkb_layout" "us"
[ 4617.375] (II) config/udev: Adding input device AT Translated Set 2 keyboard (/dev/input/event0)
[ 4617.375] (**) AT Translated Set 2 keyboard: Applying InputClass "evdev keyboard catchall"
[ 4617.376] (II) Using input driver 'evdev' for 'AT Translated Set 2 keyboard'
[ 4617.376] (**) AT Translated Set 2 keyboard: always reports core events
[ 4617.376] (**) evdev: AT Translated Set 2 keyboard: Device: "/dev/input/event0"
[ 4617.376] (--) evdev: AT Translated Set 2 keyboard: Vendor 0x1 Product 0x1
[ 4617.376] (--) evdev: AT Translated Set 2 keyboard: Found keys
[ 4617.376] (II) evdev: AT Translated Set 2 keyboard: Configuring as keyboard
[ 4617.376] (**) Option "config_info" "udev:/sys/devices/platform/i8042/serio0/input/input0/event0"
[ 4617.376] (II) XINPUT: Adding extended input device "AT Translated Set 2 keyboard" (type: KEYBOARD, id 11)
[ 4617.376] (**) Option "xkb_rules" "evdev"
[ 4617.376] (**) Option "xkb_model" "evdev"
[ 4617.376] (**) Option "xkb_layout" "us"
[ 4617.378] (II) config/udev: Adding input device ETPS/2 Elantech Touchpad (/dev/input/event10)
[ 4617.378] (**) ETPS/2 Elantech Touchpad: Applying InputClass "evdev touchpad catchall"
[ 4617.378] (**) ETPS/2 Elantech Touchpad: Applying InputClass "touchpad catchall"
[ 4617.378] (**) ETPS/2 Elantech Touchpad: Applying InputClass "Default clickpad buttons"
[ 4617.378] (II) LoadModule: "synaptics"
[ 4617.378] (II) Loading /usr/lib/xorg/modules/input/synaptics_drv.so
[ 4617.379] (II) Module synaptics: vendor="X.Org Foundation"
[ 4617.379] compiled for 1.14.1, module version = 1.7.1
[ 4617.379] Module class: X.Org XInput Driver
[ 4617.379] ABI class: X.Org XInput driver, version 19.1
[ 4617.379] (II) Using input driver 'synaptics' for 'ETPS/2 Elantech Touchpad'
[ 4617.379] (**) ETPS/2 Elantech Touchpad: always reports core events
[ 4617.379] (**) Option "Device" "/dev/input/event10"
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: x-axis range 32 - 544 (res 0)
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: y-axis range 32 - 352 (res 0)
[ 4617.380] (II) synaptics: ETPS/2 Elantech Touchpad: device does not report pressure, will use touch data.
[ 4617.380] (II) synaptics: ETPS/2 Elantech Touchpad: device does not report finger width.
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: buttons: left right double triple
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: Vendor 0x2 Product 0xe
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: invalid pressure range. defaulting to 0 - 255
[ 4617.380] (--) synaptics: ETPS/2 Elantech Touchpad: invalid finger width range. defaulting to 0 - 15
[ 4617.380] (**) Option "TapButton1" "1"
[ 4617.380] (**) Option "TapButton2" "2"
[ 4617.380] (**) Option "TapButton3" "3"
[ 4617.381] (--) synaptics: ETPS/2 Elantech Touchpad: touchpad found
[ 4617.381] (**) ETPS/2 Elantech Touchpad: always reports core events
[ 4617.383] (**) Option "config_info" "udev:/sys/devices/platform/i8042/serio1/input/input10/event10"
[ 4617.383] (II) XINPUT: Adding extended input device "ETPS/2 Elantech Touchpad" (type: TOUCHPAD, id 12)
[ 4617.383] (**) synaptics: ETPS/2 Elantech Touchpad: (accel) MinSpeed is now constant deceleration 2.5
[ 4617.383] (**) synaptics: ETPS/2 Elantech Touchpad: (accel) MaxSpeed is now 1.75
[ 4617.383] (**) synaptics: ETPS/2 Elantech Touchpad: (accel) AccelFactor is now 0.332
[ 4617.384] (**) ETPS/2 Elantech Touchpad: (accel) keeping acceleration scheme 1
[ 4617.384] (**) ETPS/2 Elantech Touchpad: (accel) acceleration profile 1
[ 4617.384] (**) ETPS/2 Elantech Touchpad: (accel) acceleration factor: 2.000
[ 4617.384] (**) ETPS/2 Elantech Touchpad: (accel) acceleration threshold: 4
[ 4617.384] (--) synaptics: ETPS/2 Elantech Touchpad: touchpad found
[ 4617.385] (II) config/udev: Adding input device ETPS/2 Elantech Touchpad (/dev/input/mouse0)
[ 4617.385] (**) ETPS/2 Elantech Touchpad: Ignoring device from InputClass "touchpad ignore duplicates"
[ 4617.386] (II) config/udev: Adding input device PC Speaker (/dev/input/event6)
[ 4617.386] (II) No input driver specified, ignoring this device.
[ 4617.386] (II) This device may have been added with another device file.
I've tried looking for this problem elsewhere as it feels like such a newbie problem to have, but I have had difficulty. There are two errors in this log, I think, but they didn't mean much to me... Any help for a linux newbie? Thanks!
EDIT: Solved; as pointed out below, I needed a window manager for a non-root user to use.
Last edited by DJMankiewicz (2013-06-05 07:30:06)

Well, soon you'll have to try out one of the more minimal options, in which you don't use any desktop environment but instead you install your own window manager (openbox, dwm, i3, etc) and use small, dedicated programs. Given your extreme space restrictions, I recommend going that route! But, take your time because that requires a bit of learning: you need to figure out which parts of a desktop environment you really need, then you need to learn the proper names for them so that you can search for information, then you need to start fiddling with configurations, etc. Better first to make sure your first Arch Linux installation is up and running properly and to learn a bit about the system before entering that downward spiral.

Acrobat 7 requires admin password at every launch for non admin users?

acrobat 7 requires admin password at every launch for non admin users?
any one with a solution or similar problem?
thanks for any help.

I've been avidly following all of the threads regarding this issue...yet none of the solutions have worked for me. I've got 11 Mac users that do not use the Creative Suite..only Acrobat, Quark, etc. I've tried installing and re-installing through both Admin and User accounts, I've tried the AdobeBib XML change, I've tried enabling Root and installing, changing permission on the Acrobat folder, etc. all to no avail. I still get asked for Admin Authentication every time Acrobat and Distiller are opened (except on the Admin account side). This is happening on one particular Mac (G4, 1GB Ram, OS 10.4.3) for both Acrobat Standard 6 and 7 as well. The biggest issue that also happens in tandem with the Acrobat installs is the inability to print from Quark. I get the following error when printing: "The process "pictwpstops" terminated unexpectedly on signal 6." Because of the necessity to print Quark documents, I have uninstalled all Acrobat on the machines until we can get a fix. This resolves the printing problem with Quark. The only option left is to set up all users as Admin accounts - which I really do not want to do. Any other suggestions out there? I've got more information available if needed.

NetworkManager applet doesn't prompt for VPN secret for non-root user

I'm using NetworkManager in GNOME DE. When logged in as non-root user, I'm unable to connect to a vpnc profile.
* As non-root, I am able to add/remove/alter/connect to WiFi network profiles with no trouble.
* As non-root, I am also able to add/remove/alter vpnc profiles.
* However, the VPN group key and VPN user password do not appear to store properly when adding/editing the profile as non-root. I can enter them, but when I bring the dialog back up, they are always blank. Even so, I can see an entry for vpnc in the Gnome keyring.
* When I slide the on/off switch to try to connect with the vpn profile, there is no prompt for the VPN group key or password. The switch just slides back to Off immediately and I can see the text 'authentication required' flash briefly where it shows the connection status. After that flashes, the connection status is back to 'Not connected'. No error message displays.
* If I sign in as root, there are no problems. The VPN 'secrets' will save properly in the dialog, and also if I leave them blank, I'm prompted for them when I activate the connection.
* Creating the connection as 'root' is not an option, as this doesn't appear in profile list when signing on as non-root.
Any ideas on where to look or what to check? As mentioned above, non-root can maintain WiFi connections through NetworkManager just fine, so the problem appears localized to VPN 'secrets'. Also other applications (i.e. Evolution) have no trouble in dealing with authentication.
I do have polkit installed:
extra/polkit 0.110-2 [installed]
Application development toolkit for controlling system-wide privileges
extra/polkit-kde 0.99.0-2
Daemon providing a polkit authentication UI for KDE
extra/polkit-qt 0.103.0-2
A library that allows developers to access PolicyKit API with a nice Qt-style API
community/polkit-gnome 0.105-1 [installed]
PolicyKit integration for the GNOME desktop

Update/more information on this...
My typical/preferred setup for my VPNs is to save the VPN group key, but to be prompted for my VPN user password on each connect. So, this is how I was trying to setup in the applet. Interestingly, I have found that if I save BOTH of the 'secrets' to the keyring, then I can connect!
The behavior is still as above in the dialog -- both secrets are blank if I edit the connection, although they are present in the Gnome keyring. As long as they are BOTH there, I can connect fine. But, if I have either of them set to 'Always Ask', then I am not prompted for them and the connection fails.
Although I can work with this, I would certainly still like to figure out what is going on and fix it, as it does bother me that it works that way:
* Why can't the dialog redisplay my secrets when I edit a connection as non-root?
* Why doesn't Always Ask work to prompt me for secrets when running as non-root?
Any ideas? I've used the Gnome/NetworkManager/vpnc combination on other desktops (this is my first Arch), and I have never seen anything like this.

Providing non-Root Admin Users ability to override password policy

Similar Messages

Maybe you are looking for