Re: Keyring password

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bradley Pursley wrote:
> Now I'd like to see if another annoying thing can be removed -
> getting rid of the prompt for the keyring password.  Since my
> machines are not used publicly, I have no desktop security issues to
> worry about and would like to know how I can keep it from prompting
> me for it in the first place.  Any ideas how to automate or remove
> this?

It's possible to have a login keyring which is unlocked automatically
when you login.  This requires you to set the keyring's passphrase to
the same passphrase as your login passphrase.

It doesn't work out of the box and it doesn't work for everyone
either.  I've got it working on F8.  I'll try to detail the steps I
took to get it working.  But for the most part, you may need to debug
this yourself if it doesn't work (and if it breaks, you get to keep
the pieces).

1) Ensure gnome-keyring-pam is installed
2) Setup /etc/pam.d/gdm [1]
3) Log out of gnome, ensure any desktop daemons have been killed
4) Restart gdm (telinit 3; telinit 5 works, as does gdm-restart)
5) Log in via the console and delete ~/.gnome/keyrings; Log out
6) Log in via gdm, when prompted for a keyring passphrase, use you
   login passphrase

Perhaps that will help.  AFAIK, that's what I did to get it working.
Hopefully I'm not missing any important steps.

[1] Here is the /etc/pam.d/gdm file from my system:
#%PAM-1.0
auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
auth       required    pam_env.so
auth       optional    pam_gnome_keyring.so
auth       include     system-auth
account    required    pam_nologin.so
account    include     system-auth
password   include     system-auth
session    required    pam_selinux.so close
session    include     system-auth
session    required    pam_loginuid.so
session    optional    pam_console.so
session    required    pam_selinux.so open
session    optional    pam_keyinit.so force revoke
session    required    pam_namespace.so
session    optional    pam_gnome_keyring.so auto_start

-- 
Todd        OpenPGP -> KeyID: 0xBEAF0CE3 | URL: www.pobox.com/~tmz/pgp
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Between two evils, I always pick the one I never tried before.
    -- Mae West

Attachment: pgpc1SaKXJTn1.pgp
Description: PGP signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux