Dan Williams wrote:

On Mon, 2007-03-19 at 04:36 +0530, Rahul Sundaram wrote:

...

Hi

"PAM_KEYRING is a pam module that launches the gnome-keyring-daemon and then unlocks a keyring using your login password."

http://www.hekanetworks.com/index.php/publisher/articleview/frmArticleID/25/...

+1

We have two bugs open against pam_keyring now both of which are very important to fix if we need to put this in by default. CC'ing the current upstream and Fedora maintainer

* Should have an automated way to enable - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=232857 * Make it possible to change keyring password - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212845

The first bug probably can fixed by adding rpm post installation scripts. The second bug currently requiring patching gnome-keyring.

Rahul

Jon Nettleton wrote:

Well you guys caught me at a good time. I am on vacation this week and one of the things I had planned was to finally push the next version of pam_keyring. This version will have password changing support in it and should close bug #212845.

Excellent.

I also started working on mockups of system-config-authentication that include a tab that would detect if you had pam_keyring or pam_ssh was available and add check boxes to enable it at graphical login.

This would be useful.

Maybe I

will spend and hour or two and finish that up. Does that sound like a good solution for bug #232857?

I would want to actually have it all just work. gnome-keyring should offer to use the login password by default or just do it. I dont want to fiddle with options anywhere but exposing that options in system-config-authentication or gnome-keyring itself would help in the case that users for some reason want to have separate passwords for the login and keyring.

Rahul

On Mon, 2007-03-19 at 14:53 +0530, Rahul Sundaram wrote:

Jon Nettleton wrote:

...

Well you guys caught me at a good time. I am on vacation this week and one of the things I had planned was to finally push the next version of pam_keyring. This version will have password changing support in it and should close bug #212845.

Excellent.

...

I also started working on mockups of system-config-authentication that include a tab that would detect if you had pam_keyring or pam_ssh was available and add check boxes to enable it at graphical login.

This would be useful.

Maybe I

...

will spend and hour or two and finish that up. Does that sound like a good solution for bug #232857?

I would want to actually have it all just work. gnome-keyring should offer to use the login password by default or just do it. I dont want to fiddle with options anywhere but exposing that options in system-config-authentication or gnome-keyring itself would help in the case that users for some reason want to have separate passwords for the login and keyring.

Way back when I first started this work to better integrate gnome-keyring I had a grand vision of how this all worked. Basically I want to create an login keyring. The idea being that an option you can set for a keyring is on_login. Gnome_keyring would then add the keyringname and password to the login keyring. Pam_keyring would then unlock the login keyring and then for each keyringname it found try to unlock that keyring with the associated password.

I think this would lend itself to allowing per application keyrings, and other options that would be better than stuffing everything in the default keyring. I think all of this will integrate better if seahorse replaces gnome-keyring-manager. Revelation might also be a good alternate frontend.

Jon

On Thu, 2007-05-31 at 10:04 -0400, David Zeuthen wrote:

Hi Jon,

I'm replying to an old thread; see below. Is there any chance we can get pam-keyring in by default for Fedora 8? If yes, how about creating a Wiki page for the feature much like the ones Matthias created for other F8 bound features as mentioned here

https://www.redhat.com/archives/fedora-desktop-list/2007-May/msg00167.html

so we can track the progress and everyone can get an overview of what work is required etc. Thanks!

Top men are on it! Well, as soon as the wiki isn't deathly slow from all the downloads. I am also working on getting a Trac instance up for pam_keyring. I am hoping I will finally have the time this weekend to get everything up and ready for public consumption.

Jon

 David

On Mon, 2007-03-19 at 10:01 +0100, Jon Nettleton wrote:

...

On Mon, 2007-03-19 at 08:12 +0530, Rahul Sundaram wrote:

...

Dan Williams wrote:

...

On Mon, 2007-03-19 at 04:36 +0530, Rahul Sundaram wrote:

...

Hi

"PAM_KEYRING is a pam module that launches the

gnome-keyring-daemon and

...

...

...

then unlocks a keyring using your login password."

http://www.hekanetworks.com/index.php/publisher/articleview/frmArticleID/25/...

...

...

+1

We have two bugs open against pam_keyring now both of which are

very

...

important to fix if we need to put this in by default. CC'ing the current upstream and Fedora maintainer

• Should have an automated way to enable -

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=232857

• Make it possible to change keyring password -

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=212845

The first bug probably can fixed by adding rpm post installation scripts. The second bug currently requiring patching gnome-keyring.

Well you guys caught me at a good time. I am on vacation this week and one of the things I had planned was to finally push the next version of pam_keyring. This version will have password changing support in it and should close bug #212845.

I also started working on mockups of system-config-authentication that include a tab that would detect if you had pam_keyring or pam_ssh was available and add check boxes to enable it at graphical login. Maybe I will spend and hour or two and finish that up. Does that sound like a good solution for bug #232857?

Jon

On Fri, 2007-06-01 at 18:50 +0530, Rahul Sundaram wrote:

Jon Nettleton wrote:

...

On Thu, 2007-05-31 at 10:04 -0400, David Zeuthen wrote:

...

Hi Jon,

I'm replying to an old thread; see below. Is there any chance we can get pam-keyring in by default for Fedora 8? If yes, how about creating a Wiki page for the feature much like the ones Matthias created for other F8 bound features as mentioned here

https://www.redhat.com/archives/fedora-desktop-list/2007-May/msg00167.html

so we can track the progress and everyone can get an overview of what work is required etc. Thanks!

Top men are on it! Well, as soon as the wiki isn't deathly slow from all the downloads. I am also working on getting a Trac instance up for pam_keyring. I am hoping I will finally have the time this weekend to get everything up and ready for public consumption.

That's good news. http//hosted.fedoraproject.org has trac which you might be able to use.

I didn't know that such a site existed. Who would I contact to possibly get pam-keyring setup there?

Jon