[Bug 1012781] New: pam-kwallet,fails to unlock kwallet by login process
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781 Bug ID: 1012781 Summary: pam-kwallet,fails to unlock kwallet by login process Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs@opensuse.org Reporter: epistemepromeneur@free.fr QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- i install pam-kwallet packet then i restart opensuse then i open a kde session then kwallet asks for me the password to open kwallet! i open /ect/pam.d/sddm file contents are: #%PAM-1.0 auth include common-auth account include common-account password include common-password session required pam_loginuid.so session include common-session it must be: #%PAM-1.0 auth include common-auth -auth optional pam_kwallet5.so account include common-account password include common-password session required pam_loginuid.so session include common-session -session optional pam_kwallet5.so auto_start after adding the statements -auth optional pam_kwallet5.so -session optional pam_kwallet5.so auto_start there is no more pb note: you can't use this feature if you choose to use gpg key to crypt wallet file you can only use this feature if: - you choose "blowfish" method when creating wallet file - the name of the wallet must be kwallet i use this tuto https://wiki.archlinux.org/index.php/KDE_Wallet -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c3
Fabian Vogt
42.3 same problem
This got implemented properly with pam-config just after the release of 42.3, so it should work fine in TW and Leap 15. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c4
--- Comment #4 from Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c5
Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c6
Fabian Vogt
then i reopen the bug report
Which version of pam_kwallet do you have? pam_kwallet-5.12.5-lp150.3.1 should work fine, older versions might be impacted by the regression caused by the security fixes. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c7
--- Comment #7 from Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c8
--- Comment #8 from Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c9
--- Comment #9 from Fabian Vogt
leap 15.0 (iso 241.1)
pam_kwallet and signon-kwallet-extension are not installed by default.
Intentional, pam_kwallet is practically unmaintained and has quite serious bugs.
/etc/pam.d/sddm does not contain any statement about opening kwallet.
sddm only includes other common-' files, which are managed by pam-config. You need to check those. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c10
--- Comment #10 from Episteme PROMENEUR
This got implemented properly with pam-config just after the release of 42.3, >> so it should work fine in TW and Leap 15.
pam_kwallet-5.12.5-lp150.3.1 should work fine
-- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c11
--- Comment #11 from Fabian Vogt
So i don't understand what you said:
This got implemented properly with pam-config just after the release of 42.3, >> so it should work fine in TW and Leap 15.
pam_kwallet-5.12.5-lp150.3.1 should work fine
If you install this ^ version of pam_kwallet on Leap 15.0, pam-config adds the right lines into /etc/pam.d/common-* to make it work. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c12
--- Comment #12 from Episteme PROMENEUR
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c13
--- Comment #13 from Fabian Vogt
OK it runs well.
i did not installed signon kwallet extension.
what is the role of signon kwallet extension?
It adds the ability to use passwords from kwallet to the single sign on framework. AFAIK it's used by kmail for gmail interfacing or owncloud integration. Normally you shouldn't need it.
thanks
-- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781
http://bugzilla.opensuse.org/show_bug.cgi?id=1012781#c14
Episteme PROMENEUR
participants (1)
-
bugzilla_noreply@novell.com