How to setup libpam-gnome-keyring?

Graphical Environments, Managers, Multimedia & Desktop questions.
Post Reply
Message
Author
lostcontrol
Posts: 2
Joined: 2007-11-20 08:50
Location: Switzerland

How to setup libpam-gnome-keyring?

#1 Post by lostcontrol »

Hi all,

I'm a new Debian user and really enjoy it :D

I never got libpam-gnome-keyring working under Gentoo and I have the same problem with Debian so I guess I'm doing something wrong :wink: I followed these instructions but I still have not login keyring :(

The Debian package has no instruction about how to set it up. Does anybody use it? How to integrate it cleanly into my pam configuration?

Thank you

maxxfell
Posts: 1
Joined: 2007-12-01 20:31

Re: How to setup libpam-gnome-keyring?

#2 Post by maxxfell »

lostcontrol wrote:Hi all,

I'm a new Debian user and really enjoy it :D

I never got libpam-gnome-keyring working under Gentoo and I have the same problem with Debian so I guess I'm doing something wrong :wink: I followed these instructions but I still have not login keyring :(

The Debian package has no instruction about how to set it up. Does anybody use it? How to integrate it cleanly into my pam configuration?

Thank you
I'm another new user and was having some problems with this too. I eventually found a README file that has been attached to the package. It's contents:
The default PAM configuration for GDM and gnome-screensaver already
uses pam_gnome_keyring.

If you want the default password to be correctly changed together with
the login password, you need to add the following line to
/etc/pam.d/common-password:
password optional pam_gnome_keyring.so


If you want to start gnome_keyring from another display manager, you
need to add the following lines to the corresponding /etc/pam.d/?dm
file:
auth optional pam_gnome_keyring.so
session optional pam_gnome_keyring.so auto_start

-- Josselin Mouette <joss@debian.org>, Sun, 25 Nov 2007 11:53:10 +0100
In my case, the configuration for GDM did NOT in fact already use libpam-gnome-keyring, so I added the "auth" and "session" lines to my /etc/pam.d/gdm file. It now looks like this:

Code: Select all

#%PAM-1.0 
auth    requisite       pam_nologin.so 
auth    required        pam_env.so readenv=1 
auth    required        pam_env.so readenv=1 envfile=/etc/default/locale 
@include common-auth 
@include common-account 
session required        pam_limits.so 
@include common-session 
@include common-password 
auth    optional        pam_gnome_keyring.so 
session optional        pam_gnome_keyring.so    auto_start 
Note that the required added lines are at the bottom. If you put them above, after the other "auth" lines, say, then you'll be required to enter your password twice at login, which doesn't give the installation a smooth feel.

Before adding these lines to the /etc/pam.d/gdm, I was getting a dialog box each login asking for the password for the keyring so that nm-applet could use it to get my wireless network key. After I'd added these lines, I still got the same dialog box, but now it had a check box "do you want to automatically open the keyring on login?" I checked yes, and have never seen the dialog box again.

Another thing is that there are some recommendations out there to add the line:

Code: Select all

@include common-pamkeyring
into /etc/pam.d/gdm.
In my installation, at least, that "common-pamkeyring" file does not exist. A file of that name was created in /etc/pam.d by installations of the libpam-keyring package that is superceded by libpam-gnome-keyring. So the "common-pamkeyring" thing probably works if you have that package installed. But when I tried it, it's only effect was to prevent gdm from running.

{In fact, what the "common-pamkeyring" file contained was two lines of code pretty much analogous to the two lines that I added to /etc/pam.d/gdm, so it would have the same effect if you had created a file with those lines of code in it.)

Hope this helps, if you're still seeking a solution.

maxx

Post Reply