fedora 9: pam_ssh and pam_keyring ?

David Jansen jansen at strw.leidenuniv.nl
Tue May 27 08:11:16 UTC 2008


I used to use pam_ssh and pam_keyring to unlock ssh keys and the gnome
keyring when logging in, both having the same password as my login password.
However, in fedora 9, this doesn't seem to work, I am still prompted for
a password the first time I use ssh and the first time some program
wants to access the keyring.

Might this be a side effect of the completely new (and seemingly
unfinished, uncustomizable and undocumentend) new gdm? Or is there
something else I am missing here.

Here is the contents of my /etc/pam.d/gdm which si almost the same as
what I had working on fedora 7:

#%PAM-1.0
auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
auth       required    pam_env.so
auth       substack    system-auth
auth       optional    pam_gnome_keyring.so
auth       optional    pam_keyring.so try_first_pass
auth       optional    pam_ssh.so try_first_pass
account    required    pam_nologin.so
account    include     system-auth
password   include     system-auth
session    required    pam_selinux.so close
session    required    pam_loginuid.so
session    optional    pam_console.so
session    required    pam_selinux.so open
session    optional    pam_keyinit.so force revoke
session    required    pam_namespace.so
session    optional    pam_gnome_keyring.so auto_start
session    optional    pam_keyring.so
session    optional    pam_ssh.so
session    include     system-auth

I also noticed there is a new pam_gnome-Keyring, but I haven't had any
luck with that one either.

David Jansen




More information about the fedora-list mailing list