Activating VPN connection when logged in via xrdp

Hi,

my question is: how can I allow Networkmanager to establish a VPN connection from a machine I’m logged into via xrdp?

The situation is as follows: I’m sitting at machineA and using xfreerdp to log into machineB running an xrdp server. I’d like to establish a VPN connection ON machineB with Networkmanager, simply by clicking on it in nm-applet. However, nm-applet tells me: “Not authorized to control networking.”
I don’t have that problem when working directly on machineA, so it’s (probably) not an issue of my user being in the wrong group.

I’m guessing it’s a polkit issue but I don’t know how to grant myself the minimal set of permissions necessary to achieve what I want.

For some reason it took me a while to stumble across this thread this thread and figure out what it implies for my problem.

The solution that currently works for me:
Edit
/etc/polkit-default-privs.local to add


org.freedesktop.NetworkManager.network-control auth_admin:auth_admin:auth_admin

then run
/sbin/set_polkit_default_privs

Oh well… it seems that this solution stopped working with some recent update. Now, nm-applet won’t ask for authentication anymore and refuses to connect to VPN because: “Not authorized to control networking”. Sigh.
In addition, gpk-update-viewer also doesn’t ask for authentication any more and refuses to install packages in the remote sessions.