Arch Linux

cmonty14

Member

Registered: 2019-10-05

Posts: 58

Unlock Gnome keyring after login fails

Hi,
I'm using Lightdm desktop manager and I want to unlock the keyring once I login.
This is documented here in the Wiki.

I created the following configuration based on Wiki and Gnome documentation, means the pam configuration is included in
/etc/pam.d/passwd
/etc/pam.d/login
/etc/pam.d/lightdm
/etc/pam.d/lightdm-autologin

[ts@pc7-cubi3 ~]$ grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
Have PAM Support

[ts@pc7-cubi3 ~]$ test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
Have 'login' keyring

[ts@pc7-cubi3 ~]$ ls -l .gnome2/keyrings/
insgesamt 4
lrwxrwxrwx 1 thomas thomas 48 24. Nov 19:40 login.keyring -> /home/ts/.local/share/keyrings/login.keyring

[ts@pc7-cubi3 ~]$ ack pam_gnome_keyring.so /etc/pam.d/
/etc/pam.d/passwd
6:password	optional	pam_gnome_keyring.so

/etc/pam.d/login
6:auth       optional     pam_gnome_keyring.so
9:session    optional     pam_gnome_keyring.so auto_start

/etc/pam.d/lightdm
3:-auth        optional    pam_gnome_keyring.so
7:-session     optional    pam_gnome_keyring.so auto_start

/etc/pam.d/lightdm-autologin
9:-auth       optional    pam_gnome_keyring.so
13:-session    optional    pam_gnome_keyring.so auto_start

[ts@pc7-cubi3 ~]$ tail -n 10 .bashrc 
## Enable GNOME keyring
if [ -n "$DESKTOP_SESSION" ];then
    #eval $(gnome-keyring-daemon --start)
    eval $(gnome-keyring-daemon --start --components=pkcs11,secrets,ssh)
    export SSH_AUTH_SOCK
fi

However I still get this pop-up to enter keyring password when starting an application, e.g. Chrome (see screenshot here).

Can you please advise what is missing / why unlocking keyring after login failes?

THX

Last edited by cmonty14 (2019-11-24 19:00:41)