Comment # 53 on bug 1081947 from Franck Bui

(In reply to Stanislav Brabec from comment #52)
> Done: https://build.opensuse.org/request/show/680184
> 
> Could you verify that it is correct?
> 

According to pam_keyring man page:

    This module should be included as early as possible in a PAM
    configuration, so that other PAM modules can attach tokens
    to the keyring.

Therefore I would put it earlier in the list, ie before "common-session".

> I will submit the change to SLE 15 SP1.
> 
> Should I add this to the next update in SLE 15?

The most important distro to fix is Factory/Tumbleweed at the moment since
we're planning to re-introduce the keyring mode stuff in systemd soon.

As far as SLE15+ is concerned, it's not strictly mandatory since we don't plan
to re-enable the keyring stuff but it shouldn't hurt either. I think if you add
it to SLE15-SP1, it also makes sense to submit it to SLE15 especially if other
packages did it already.