Comment # 2 on bug 1219767 from Valentin Lefebvre

(In reply to Franck Bui from comment #1)
> Valentin (added in Cc) found that the option "--gnome_keyring-only_if" of
> pam_gnome_keyring might be missing in common-auth. This option is actually
> used to instruct the gnome PAM module to interact only when the gnome stack
> is involved.

Indeed, the gnome-keyring pam module is added by `pam-config` from the
packaging of gnome-keyring. And the module is set into AUTH and SESSION.

As it was discussed at bsc #443189, pam-gnome-keyring's option
"only_if=service" has been removed from AUTH, to be only in one place at
SESSION.

As shown by Franck, it now, causes a problem. pam_gnome_keyring is invovlved by
all services during the AUTH stack.

I would suggest to add gnome keyring pam module option "only_if", not only for
SESSION or PASSWORD, but also for AUTH (common-auth) when using pam-config.

Thorsten(added in NeedInfo) do you have some infos or inputs according that ?