Arch Linux

schtiehve

Member

Registered: 2014-03-30

Posts: 14

GDM the password you use to login in to your computer no longer match

Hey guys,

I was doing some changes on PAM trying to get GDM fingerprint login to also unlock fscrypt.

I've added the following line to gnome-fingerprint and systemd-login:

session    optional   pam_fscrypt.so       drop_caches lock_policies

After a reboot logging in with either the fingerprint or my password I got prompted to unlock my login key (which is normal with fingerprint login). However unlocking the keyring with the password no longer worked. Loggin in with my password I also get the message above:

the password you use to login in to your computer no longer match

I have not changed my login password or the login keyrings password (actively)

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,675

Re: GDM the password you use to login in to your computer no longer match

Post the entire pam files you altered.
Do you get the "the password you use to login in to your computer no longer match" for the login or for unlocking gkr?

But there seems to be some recent issue w/ gkr, https://bbs.archlinux.org/viewtopic.php?id=288822
Does undoing your changes (commenting the injected lines) restore the status quo ante?

PSA: keep a root shell open eg. on a console when messing around w/ PAM, you'll know why when you need it

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

schtiehve

Member

Registered: 2014-03-30

Posts: 14

Re: GDM the password you use to login in to your computer no longer match

I've changed back the lines I've altered.

These are the two pam files I've edited currently:

/etc/pam.d/gdm-fingerprint:

#%PAM-1.0

auth       required                    pam_shells.so
auth       requisite                   pam_nologin.so
auth       requisite                   pam_faillock.so      preauth
auth       required                    pam_fprintd.so
auth       optional                    pam_permit.so
auth       required                    pam_env.so
auth       [success=ok default=1]      pam_gdm.so
auth       optional                    pam_gnome_keyring.so

account    include                     system-local-login

password   required                    pam_deny.so

session    include                     system-local-login
session    optional                    pam_gnome_keyring.so auto_start

/etc/pam.d/system-login:

#%PAM-1.0

auth       required   pam_shells.so
auth       requisite  pam_nologin.so
auth       include    system-auth
auth       optional   pam_fscrypt.so

account    required   pam_access.so
account    required   pam_nologin.so
account    include    system-auth

password   include    system-auth

session    optional   pam_loginuid.so
session    optional   pam_keyinit.so       force revoke
session    optional   [success=1 default=ignore] pam_succeed_if.so service = systemd-user quiet
session    optional   pam_fscrypt.so
session    include    system-auth
session    optional   pam_motd.so
session    optional   pam_mail.so          dir=/var/spool/mail standard quiet
-session   optional   pam_systemd.so
session    required   pam_env.so

I'm getting the  "the password you use to login in to your computer no longer match" after login when gdm auto tries to unlock gkr. Or if I try to unlock gkr in seahorse manually.

My current assumption is the keyring got somehow "corrupted" during my messing around with pam and now it dosnet accept the password anymore.

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,675

Re: GDM the password you use to login in to your computer no longer match

I'm getting the  "the password you use to login in to your computer no longer match" after login when gdm auto tries to unlock gkr.

Remains after reverting the PAM?

As mentioned, gkr has been acting up recently - this might be completely unrelated.

Nevertheless:
Do you have
https://wiki.archlinux.org/title/GNOME/Keyring#PAM_step and or https://wiki.archlinux.org/title/GNOME/ … r_password ?
Did you try to comment the pam_gnome_keyring.so lines in gdm-fingerprint ?
Can you unlock the keyring when logging into a multi-user.target (no GDM)?
(I assume getting access to your keys is the prime objective?)

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

schtiehve

Member

Registered: 2014-03-30

Posts: 14

Re: GDM the password you use to login in to your computer no longer match

Hmm yeah. neither reverting the cahnge nor doing anything additional in PAM worked. The password seems to be changed (or the database corrupt).

I finally gave up and reset the Database (i.e. deleted it) there are no important entries in there anyway.

Thanks for the Help anyway.