msp3k
December 3rd, 2009, 04:00 PM
We're looking at using Ubuntu as our next desktop. We've been using an older version of Debian for years. Our environment involves an auto-cross-mounting setup where the user's home area physically resides on the desktop on their desk, but can be automounted to any other computer via NFS. Because of this, our workstations must remain online 24/7 for important things like nightly backups, email delivery, and, of course, services like NFS and SSH.
Using Karmic, I'm having a devil of a time figuring out how to disable (or at least require admin authentication before allowing) reboot/shutdown/hibernate/suspend buttons.
I've tried configuring GConf's /apps/gdm/simple-greeter/disable_restart_buttons = true for the user gdm, but that didn't work -- neither for gdm nor for the average user.
At the moment I'm trying to figure out PolicyKit. According to gdm's documentation:
GDM may be configured to use PolicyKit to allow the system administrator to control whether the login screen should provide the shutdown and restart buttons on the greeter screen.
These buttons are controlled by the org.freedesktop.consolekit.system.stop-multiple-users and org.freedesktop.consolekit.system.restart-multiple-users actions respectively. Policy for these actions can be set up using the polkit-gnome-authorization tool, or the polkit-auth command line program.
That sounds great. If there's one overruling way to prevent user reboot/shutdown for both gdm and the average user, then I'm all over. Unfortunately, I can't figure out how it works.
I've tried:
sudo polkit-auth \
--user gdm \
--block org.freedesktop.consolekit.system.stop-multiple-users
sudo polkit-auth \
--user gdm \
--block org.freedesktop.consolekit.system.restart-multiple-users
But to no avail.
Surely someone out there has run into this kind of thing before?
Using Karmic, I'm having a devil of a time figuring out how to disable (or at least require admin authentication before allowing) reboot/shutdown/hibernate/suspend buttons.
I've tried configuring GConf's /apps/gdm/simple-greeter/disable_restart_buttons = true for the user gdm, but that didn't work -- neither for gdm nor for the average user.
At the moment I'm trying to figure out PolicyKit. According to gdm's documentation:
GDM may be configured to use PolicyKit to allow the system administrator to control whether the login screen should provide the shutdown and restart buttons on the greeter screen.
These buttons are controlled by the org.freedesktop.consolekit.system.stop-multiple-users and org.freedesktop.consolekit.system.restart-multiple-users actions respectively. Policy for these actions can be set up using the polkit-gnome-authorization tool, or the polkit-auth command line program.
That sounds great. If there's one overruling way to prevent user reboot/shutdown for both gdm and the average user, then I'm all over. Unfortunately, I can't figure out how it works.
I've tried:
sudo polkit-auth \
--user gdm \
--block org.freedesktop.consolekit.system.stop-multiple-users
sudo polkit-auth \
--user gdm \
--block org.freedesktop.consolekit.system.restart-multiple-users
But to no avail.
Surely someone out there has run into this kind of thing before?