Bug ID 1155699
Summary The gnome keyring socket is not owned with the same credentials as the user login
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.1
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Basesystem
Assignee bnc-team-screening@forge.provo.novell.com
Reporter piny@gmx.com
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

This is a re-reporting acc.
https://bugzilla.novell.com/show_bug.cgi?id=755603#c14

See below test case.

OS Information
   OS:     Linux 4.12.14-lp151.28.20-default x86_64
   System: openSUSE Leap 15.1
   Qt:     5.9.7
   KDE:    5.55.0
   Plasma: 5.12.8

Upgraded from Leap 15.0 with `zypper dup`

Issue also was present on Leap 15.0 but *not* in OpenSuse 42.3!

Differences from https://bugzilla.novell.com/show_bug.cgi?id=755603#c0
- Variables $GNOME_KEYRING_CONTROL and $GNOME_KEYRING_PID are not defined

Besides

```
srwxr-xr-x 1 peter cpn 0 Nov  3 14:50 /var/run/user/500/keyring/control
```
there seems to be no other keying present (only user 500 is logged in)



Test case:
==========

Create a new user 'hugo', then 


@peter:

```
logger "TEST: su - hugo"
su - hugo
```

@journalctl -f:

```
Nov 03 19:20:54 nue-p1.nue.private peter[18068]: TEST: su - hugo
Nov 03 19:20:58 nue-p1.nue.private su[18070]: The gnome keyring socket is not
owned with the same credentials as the user login:
/run/user/500/keyring/control
Nov 03 19:20:58 nue-p1.nue.private su[18070]: gkr-pam: couldn't unlock the
login keyring.
Nov 03 19:20:58 nue-p1.nue.private su[18070]: (to hugo) peter on pts/1
Nov 03 19:20:58 nue-p1.nue.private su[18070]: pam_unix(su-l:session): session
opened for user hugo by peter(uid=500)
```

@hugo:

```
id | logger
logger "TEST: su exit"
logout
```

@journalctl -f:

```
Nov 03 19:21:01 nue-p1.nue.private peter[18115]: uid=1003(hugo) gid=100(users)
groups=100(users)
Nov 03 19:21:10 nue-p1.nue.private peter[18117]: TEST: su exit
Nov 03 19:21:12 nue-p1.nue.private su[18070]: pam_unix(su-l:session): session
closed for user hugo
```

Note:
=====

On 42.3 there always appeared a `kdeinit`-entry exactly before the `su`-entry
in the journal:

```
Apr 08 09:05:57 nue-p1.nue.private kdeinit5[20831]: 
Apr 08 09:06:00 nue-p1.nue.private su[26462]: (to root) peter on pts/1
Apr 08 09:06:00 nue-p1.nue.private su[26462]: pam_unix(su-l:session): session
opened for user root by peter(uid=500)
```

which is missing on Leap 15.1:

```
Nov 03 19:15:41 nue-p1.nue.private su[17871]: The gnome keyring socket is not
owned with the same credentials as the user login:
/run/user/500/keyring/control
Nov 03 19:15:41 nue-p1.nue.private su[17871]: gkr-pam: couldn't unlock the
login keyring.
Nov 03 19:15:41 nue-p1.nue.private su[17871]: (to hugo) peter on pts/1
Nov 03 19:15:41 nue-p1.nue.private su[17871]: pam_unix(su-l:session): session
opened for user hugo by peter(uid=500)
```


You are receiving this mail because: