On 8/16/07, Dan Winship <<a href="mailto:dwinship@redhat.com">dwinship@redhat.com</a>> wrote:<div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Jon Nettleton wrote: > On 8/15/07, *Matthias Clasen* <<a href="mailto:mclasen@redhat.com">mclasen@redhat.com</a> > - unlock keyring on login > > This should be included in gnome 2.20 with the new gnome-keyring. > It includes a pam module to do this. If it doesn't then I can finish > hacking pam_keyring to do what we want. I can log into Fedora on my Thinkpad by just swiping my finger on the fingerprint reader. Ideally that would unlock my keyring too, which is impossible with the combination of pam_thinkfinger and pam_keyring.</blockquote><div> We addressed this back with pam_bioapi, and I think it only partially got implemented. The idea was to embed the passphrase into the bir of the user. Then have the pam module populate AUTH_TOK with the passphrase and pass it along to subsequent pam_modules in the stack. I don't want my finger cut off to get to my data so I steer clear. Jon </div> </div>