13

In 2012 I used Ubuntu's gnome-disks utility to encrypt an external drive.
Last year I was still being able to unlock it.

But today I tried again on Ubuntu 2012.04 and gnome-disks says:

Error unlocking encrypted device
Not authorized to perform operation (udisks-error-quark, 4)

How to solve this and unlock my data?

Not authorized to perform operation (udisks-error-quark, 4)

6 Answers 6

23

The problem can be solved with sudo:

gksudo gnome-disks

then, operate normaly

5
  • This worked for me. Oct 26, 2018 at 11:32
  • Why do we have to use sudo now but didnt before? This just started happening to me! Dec 15, 2019 at 2:09
  • 6
    Ubuntu 18 removed gksudo, so I just used sudo gnome-disks instead. There seemed to be a big delay (~5 seconds) between clicking the button to unlock the partition and the dialog popping up for me to type the password in, but otherwise it worked just fine. Dec 15, 2019 at 2:19
  • I've accessed "Disks" window manually and haven't been able to mount. Now this command opened the same window but now it mounts. TY!
    – testing_22
    Jan 7, 2022 at 11:46
  • Disks used to ask for a password itself (e.g. when starting the disk benchmark) without the need to run it using sudo, but after I have reinstalled Ubuntu, it just shows the error message instead of asking for a password. What may be the reason? I have been using the same version of Ubuntu before the re-installation. Oct 19, 2023 at 14:14
10

The error code 4 returned by udisks2 (which is used by gnome-disks-utilities internally) is the constant UDISKS_ERROR_NOT_AUTHORIZED_CAN_OBTAIN in code.

This code is returned, if the current subject (the gnome-disks applications, actually) is not allowed to do the unlock operation, however it might be allowed if further authentication would be provided, typically by providing the system administrator's (root) password.

Such additional password query is typically handled by a so-called authentication agent. It seems that this agent is not setup correctly in your environment.

I had the same problem using gnome-disks within an i3wm-session (in archlinux -- however this should be similar under Ubuntu): After having installed the (legacy) "polkit-gnome" authentication agent (and starting it in a session startup script), I got first the passphrase dialog for specifying the LUKS passphrase of the device and then a second dialog asking for the root password.

The command line hack you mention can alternatively also be done using udisksctl in an cleaner way:

udisksctl unlock --block-device /dev/sda1
udisksctl mount --block-device /dev/mapper/my_encrypted_volume

Note that the udisksctl unlock will ask for the (same) two passwords as gnome-disks would do when the authentication agent is setup correctly. No need to use sudo here.

For further information, dig into udisks2 and polkit documentation or look into udisks2 source code directly. This is how I understood and finally solved the problem for me.

1
  • 1
    Error unlocking /dev/sda1: GDBus.Error:org.freedesktop.UDisks2.Error.Failed: Error unlocking /dev/sda1: Failed to activate device: Operation not permitted
    – Mehdi
    Aug 15, 2019 at 12:43
2

What helped me is very similar to Thrushbeard’s explanation, but I can’t post comments yet.

I installed mate-polkit and then executed /usr/lib/x86_64-linux-gnu/polkit-mate-authentication-agent-1. If you’re not using Mate, then there’s an overview over all the Polkit packages. Click the respective link on that wiki page and then “View the file list for [package]” to find the name of the executable for your environment. I hope it helps!

2

I had this same problem with a 4TB disk. The disk used the MBR partition table, which has a 2TB limit. Changing the partition table to GPT (GUID Partition Table) fixed the problem. The Ubuntu Disks application didn't mention this. GParted helped me out.

(The thing that bugs me though is that I have used this disk as external storage via USB, and that has worked somehow. Maybe I'm wrong about the MBR, but the reset to GPT fixed my problem. Posting here because somebody might have the same issue somehow.)

1

The problem can be solved via command line:

sudo cryptsetup luksOpen /dev/sda1 my_encrypted_volume
sudo mkdir /media/adhoc
sudo mount /dev/mapper/my_encrypted_volume /media/adhoc

You can now access your files in the /media/adhoc folder.
my_encrypted_volume and adhoc can be whatever name you want (no space), anything will work.

0

I solved it using sudo and after @Nicolas Raoul answer mounting/umounting

sudo gnome-disks

sudo mount /dev/sda3 /mnt

sudo umount /dev/sda3

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .