Arch Linux

divansantana

Member

Registered: 2011-01-21

Posts: 117

KDE kwallet single sign on

Hi All,

Kubuntu 14.04 LTS apprently includes a single sign on for kwallet:
"PAM KWallet git20140410 New single sign-on capabilities for the password manager KWallet. Allowing new wallets to be automatically be created on first login and automatically unlocked on subsequent logins. "

I believe kdebase-workspace needs to be patched and we may need a pam-kwallet package to be shipped.
Hoping someone is interested in bringing this to Arch soon.

AFAIK aur/pam_kwallet-svn is the old package that doesn't work any more.

https://wiki.ubuntu.com/TrustyTahr/Rele … it20140410
https://bugs.launchpad.net/ubuntu/+sour … ug/1305307

Pietro Pizzi

Member

From: Wien

Registered: 2014-03-09

Posts: 4

Re: KDE kwallet single sign on

+1

Yes, yes, yes. This is one of very few bugs that is in my watchlist, for quite a while now. It is a shame that u can unlock the gnome keyring from kde but not the own wallet. I hope to that there is will in the Arch team to make this happened! And even in the Arch way, a simple unpatched upstream way, this change should be done because it isn't a feature patch, it's definitely a bug fix.

So please, if it works in Kubuntu, it should absolutely works in Arch

---

Erst wenn der letzte Programmierer eingesperrt,
das letzte Programm verwirklicht und die letzte Idee patentiert ist,
werdet ihr merken, dass Anwälte nicht programmieren können.

mhogomchungu

Member

Registered: 2013-03-29

Posts: 87

Re: KDE kwallet single sign on

Its possible to open a kwallet without getting a password prompt by just setting the wallet without a password.

They could also just patch kwallet to silently create a wallet with an empty password.

This to me seems like unnecessary complexity.

Pietro Pizzi

Member

From: Wien

Registered: 2014-03-09

Posts: 4

Re: KDE kwallet single sign on

Every time this topic comes up there is one who suggest to store passwords in an unencrypted container. Really?? Please!!

---

Erst wenn der letzte Programmierer eingesperrt,
das letzte Programm verwirklicht und die letzte Idee patentiert ist,
werdet ihr merken, dass Anwälte nicht programmieren können.

divansantana

Member

Registered: 2011-01-21

Posts: 117

Re: KDE kwallet single sign on

Well package pam_kwallet-git exists in AUR now.
Blog https://www.dennogumi.org/2014/04/unloc … -with-pam/ and forum http://forum.kde.org/viewtopic.php?f=14&t=120843 exists too.
Haven't tried this in Arch yet though.

Svenstaro

Administrator

From: Germany

Registered: 2008-11-19

Posts: 393

Re: KDE kwallet single sign on

Did you guys make an upstream bug report for inclusion of this patch? If upstream won't take it, we won't take it.

Pietro Pizzi

Member

From: Wien

Registered: 2014-03-09

Posts: 4

Re: KDE kwallet single sign on

If u mean at KDE, not we in particular but yes, 10 Year ago https://bugs.kde.org/show_bug.cgi?id=92845

And all signs points to a KDE5 (or later?) only release with no official back-ports. If you remember the KDE3->4 transition, it takes at least 2 years till "we" can (would) use it. So that in mind, i'm afraid we can have upstream support for a system that we would use on a production machine in 2-3 years. That's why Kubuntu, i think, patched it now on it's own. So i (we) had hopes that an skilled Arch maintainer can do that to!?

So long, i wish you a nice week! And please forgive me if i have a wrong picture of the Arch way, as you can see from my post counter, i am totally new to Arch Linux (not to linux), in fact i'm in the middle of my fist installation process

---

Erst wenn der letzte Programmierer eingesperrt,
das letzte Programm verwirklicht und die letzte Idee patentiert ist,
werdet ihr merken, dass Anwälte nicht programmieren können.

ceri

Member

Registered: 2013-10-12

Posts: 58

Re: KDE kwallet single sign on

Well package pam_kwallet-git exists in AUR now.
Blog https://www.dennogumi.org/2014/04/unloc … -with-pam/ and forum http://forum.kde.org/viewtopic.php?f=14&t=120843 exists too.
Haven't tried this in Arch yet though.

Tried it but I got this error:

pam_kwallet(login:session): pam_kwallet: open_session called without kwallet_key

Pietro Pizzi

Member

From: Wien

Registered: 2014-03-09

Posts: 4

Re: KDE kwallet single sign on

As you can read at the Bug-Tracker, the Tutorial and the Forum, there is no standard way at the moment and he had make this work with trail-and-error (and not on Arch). Now we need an Arch-KDE-PAM "guru" to get this to work All i know at the moment is, it is possible. Hopefully some Arch-Defs are interested in it to.

---

Erst wenn der letzte Programmierer eingesperrt,
das letzte Programm verwirklicht und die letzte Idee patentiert ist,
werdet ihr merken, dass Anwälte nicht programmieren können.

OlafLostViking

Member

From: Lost

Registered: 2013-01-30

Posts: 59

Re: KDE kwallet single sign on

For the KF5 users, there is now a port of pam_kwallet. However, if and when it comes to Arch/AUR I don't know.