Arch Linux

schumischumi

Member

Registered: 2017-03-21

Posts: 11

pam cant unlock kwallet error -)

Hi,

I have problems unlocking kwallet at the login.
the nextcloud client is my testtool because it requests to unlock kwallet right after the login.
I use the sddm autologin feature for this user account. could this be the problem?

the error msg is "Wallet failed to get opened by PAM, error code is -9" but I wasnt able to find any information for the error code -9.

thx in advance!

sudo journalctl -b | grep kwallet

Aug 21 23:04:13 user-pc sddm-helper[797]: pam_kwallet5(sddm-autologin:auth): (null): pam_sm_authenticate
Aug 21 23:04:13 user-pc sddm-helper[797]: pam_kwallet5(sddm-autologin:auth): pam_kwallet5: Couldn't get password (it is empty)
Aug 21 23:04:13 user-pc sddm-helper[797]: pam_kwallet5(sddm-autologin:setcred): pam_kwallet5: pam_sm_setcred
Aug 21 23:04:14 user-pc sddm-helper[797]: pam_kwallet5(sddm-autologin:session): pam_kwallet5: pam_sm_open_session
Aug 21 23:04:14 user-pc sddm-helper[814]: pam_kwallet5: final socket path: /run/user/1000/kwallet5.socket
Aug 21 23:04:14 user-pc audit[797]: USER_START pid=797 uid=0 auid=1000 ses=1 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_unix,pam_permit,pam_mail,pam_systemd,pam_env,pam_gnome_keyring,pam_kwallet5 acct="user" exe="/usr/lib/sddm/sddm-helper" hostname=? addr=? terminal=:0 res=success'
Aug 21 23:04:15 user-pc plasma_session[840]: org.kde.plasma.session: Starting autostart service  "/etc/xdg/autostart/pam_kwallet_init.desktop" ("/usr/lib/pam_kwallet_init")
Aug 21 23:04:15 user-pc kwalletd5[815]: Icon theme "gnome" not found.
Aug 21 23:04:15 user-pc kwalletd5[815]: Icon theme "ubuntu-mono-dark" not found.
Aug 21 23:04:15 user-pc kwalletd5[815]: Icon theme "Mint-X" not found.
Aug 21 23:04:15 user-pc kwalletd5[815]: Icon theme "elementary" not found.
Aug 21 23:04:15 user-pc kwalletd5[815]: Icon theme "gnome" not found.
Aug 21 23:04:15 user-pc kwalletd5[815]: kf.wallet.kwalletd: Wallet failed to get opened by PAM, error code is -9
Aug 21 23:04:18 user-pc plasmashell[976]: kf.coreaddons: plugin metadata in "/usr/lib/qt/plugins/kcm_kwallet5.so" does not have a valid 'MetaData' object
Aug 21 23:04:19 user-pc kwalletd5[815]: Application ' "Nextcloud" ' using kwallet without parent window!
Aug 21 23:04:29 user-pc kwalletd5[815]: qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 906, resource id: 14680099, major code: 40 (TranslateCoords), minor code: 0

cat /etc/pam.d/sddm

#%PAM-1.0

auth            include         system-login
-auth           optional        pam_gnome_keyring.so
-auth   optional  pam_kwallet5.so

account         include         system-login

password        include         system-login
-password       optional        pam_gnome_keyring.so use_authtok

session         optional        pam_keyinit.so force revoke
session         include         system-login
-session                optional        pam_gnome_keyring.so auto_start
-session  optional  pam_kwallet5.so auto_start

systeminfo

Operating System: Arch Linux
KDE Plasma Version: 5.22.4
KDE Frameworks Version: 5.85.0
Qt Version: 5.15.2
Kernel Version: 5.13.12-zen1-1-zen (64-bit)
Graphics Platform: X11
Processors: 8 × Intel® Core™ i7-4790 CPU @ 3.60GHz
Memory: 15.6 GiB of RAM
Graphics Processor: AMD Radeon RX 5700

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,334

Re: pam cant unlock kwallet error -)

PAM can't auto-unlock the keyring with a password that you never entered, so yes, using autologin is the problem.

schumischumi

Member

Registered: 2017-03-21

Posts: 11

Re: pam cant unlock kwallet error -)

ah thank you for the clarification. I should have read the wiki...