https://bugzilla.suse.com/show_bug.cgi?id=1219767 https://bugzilla.suse.com/show_bug.cgi?id=1219767#c2 Valentin Lefebvre <valentin.lefebvre@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kukuk@suse.com Flags| |needinfo?(kukuk@suse.com) --- Comment #2 from Valentin Lefebvre <valentin.lefebvre@suse.com> --- (In reply to Franck Bui from comment #1)
Valentin (added in Cc) found that the option "--gnome_keyring-only_if" of pam_gnome_keyring might be missing in common-auth. This option is actually used to instruct the gnome PAM module to interact only when the gnome stack is involved.
Indeed, the gnome-keyring pam module is added by `pam-config` from the packaging of gnome-keyring. And the module is set into AUTH and SESSION. As it was discussed at bsc #443189, pam-gnome-keyring's option "only_if=service" has been removed from AUTH, to be only in one place at SESSION. As shown by Franck, it now, causes a problem. pam_gnome_keyring is invovlved by all services during the AUTH stack. I would suggest to add gnome keyring pam module option "only_if", not only for SESSION or PASSWORD, but also for AUTH (common-auth) when using pam-config. Thorsten(added in NeedInfo) do you have some infos or inputs according that ? -- You are receiving this mail because: You are on the CC list for the bug.