[Bug 1081746] New: kdm does not auto-unlock Login keyring on boot from shutdown state

newer
[Bug 1110736] system upgrade from...

older
[Bug 1110736] system upgrade from...

bugzilla_noreply＠novell.com

20 Feb 2018 20 Feb '18

12:42

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 Bug ID: 1081746 Summary: kdm does not auto-unlock Login keyring on boot from shutdown state Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs@opensuse.org Reporter: studio@anchev.net QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- I notice that since recently kdm no longer auto unlocks the Login keyring in Seahorse and I have to unlock it manually (by typing my login password). This seems to happen when I boot the machine from shutdown state in the morning. When I restart it during the day (without power off) the Login keyring is unlocked automatically upon login to KDE Plasma. -- You are receiving this mail because: You are on the CC list for the bug.

Attachments:

attachment.htm (text/html — 2.5 KB)

Show replies by date

bugzilla_noreply＠novell.com

20 Feb 20 Feb

16:35

New subject: [Bug 1081746] kdm does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c1 Wolfgang Bauer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wbauer@tmo.at --- Comment #1 from Wolfgang Bauer --- Do other displaymanagers have the same problem? As already mentioned in a previous bug report, it's not really the DM that unlocks the GNOME keyring. That's done by gnome-keyring-pam, which is "run" by PAM on login (if it's setup to be, which by default it only is for gdm, lightdm, and lxdm). So the problem may be on a different level... If it is indeed specific to kdm, it's rather a WONTFIX though I'm afraid. kdm is dead and basically unmaintained since years. The KDE developers dropped it when switching to Qt5 in favor of recommending SDDM (which is Qt5 based). In any case, I would find it strange though that it works on reboot, but not on cold start. -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

17:22

New subject: [Bug 1081746] kdm does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c2 --- Comment #2 from George Anchev ---

...

Do other displaymanagers have the same problem?

Hard to say. I have used only lightdm and kdm. The last time I used sddm was very long ago (before you helped me with a way to reboot automatically to Windows through a script which seems to be possible only with kdm). So before recently switching from lightdm to kdm I have never had this problem with lightdm.

...

So the problem may be on a different level...

I suppose that is quite possible. I have noticed that happening in the last week (or two). I run 'zypper up' every day, so something may have been "fixed". I am questioning whether it is a problem with cold/warm reboot or something related to timing (e.g. the time between boots) because I don't see any logic in the type of reboot being related to it. What should I test or look for? -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

7 Mar 7 Mar

08:29

New subject: [Bug 1081746] kdm does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c3 --- Comment #3 from George Anchev --- I have been using sddm for a few days and the problem remains with it too. -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:31

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 George Anchev changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|kdm does not auto-unlock |KDE Plasma does not |Login keyring on boot from |auto-unlock Login keyring |shutdown state |on boot from shutdown state -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:49

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c4 Neil Rickert changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nwr10cst-oslnx@yahoo.com --- Comment #4 from Neil Rickert ---

...

kdm no longer

I'm puzzled by the "no longer" part. In my experience, "kdm" and "sddm" have never unlocked the Gnome keyring. But "gdm" and "lightdm" have unlocked it. I somehow have the impression that there's an explicit rule in the pam configuration that specifies this behavior. Maybe this is a feature, rather than a bug. -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:40

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c5 --- Comment #5 from George Anchev ---

...

Maybe this is a feature, rather than a bug.

If that was so why do we have in /etc/pam.d/common-session: session optional pam_gnome_keyring.so auto_start only_if=gdm,gdm-password,lxdm,lightdm with the ability to remove the trailing "only_if=gdm,gdm-password,lxdm,lightdm" and unlock the keyring with other DMs? (as I do) -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

22:22

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c6 --- Comment #6 from Wolfgang Bauer --- Again, it's not the DM that unlocks the GNOME keyring, nor is it Plasma. That should be done by gnome-keyring-pam, if it is called by the PAM config. Normally that's only the case with gdm, lxdm, and lightdm, but if you change the config files appropriately it should work with any DM IMHO. If that doesn't work, it's likely a problem with PAM or gnome-keyring-pam I'd say. That it doesn't work with sddm either would even more point to that I think. The strange thing here is that it seems to work on login/logout, just not on a fresh boot. And that it apparently still works with lightdm. Btw, have you tried that too recently? (i.e. with lightdm) Or maybe you'd find some messages in the journal from gnome-keyring-pam? -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

22:27

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c7 --- Comment #7 from Wolfgang Bauer --- (In reply to Wolfgang Bauer from comment #6)

...

The strange thing here is that it seems to work on login/logout, just not on a fresh boot.

Regarding this, you actually wrote that it works on a reboot too, just not when you turn off the system and start it again, right? That makes it even more mysterious... -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23:41

New subject: [Bug 1081746] KDE Plasma does not auto-unlock Login keyring on boot from shutdown state

http://bugzilla.opensuse.org/show_bug.cgi?id=1081746 http://bugzilla.opensuse.org/show_bug.cgi?id=1081746#c8 --- Comment #8 from George Anchev --- Created attachment 763036 --> http://bugzilla.opensuse.org/attachment.cgi?id=763036&action=edit journal excerpt

...

Btw, have you tried that too recently? (i.e. with lightdm)

No. But I will set it up and watch for failures.

...

Or maybe you'd find some messages in the journal from gnome-keyring-pam?

I am attaching a journal containing a failed unlock (from this morning) + a successful unlock (from a recent reboot). The messages saying: gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used look worrying (not sure if they are related but it seems they appear in both scenarios).

...

Regarding this, you actually wrote that it works on a reboot too, just not when you turn off the system and start it again, right?

It is actually even more mysterious because it doesn't fail on each cold boot although the rate of failures is higher on cold boot. I can't recall for sure if it ever failed on warm reboot. Although I don't keep a record for each success and failure I noticed a pattern of frequent failures in the morning (cold boots). -- You are receiving this mail because: You are on the CC list for the bug.

bugzilla_noreply＠novell.com

8 Mar 8 Mar