Overriding gnome-keyring password prompts

One of the new features of Fedora 8 / GNOME was storing remembered Evolution passwords in GNOME’s keyring. So now not only NetworkManager or Nautilus asks for a keyring password in certain situations, but also Evolution does the same while checking email. How useful and convenient that is? And of course, there is no option to turn it off easily. However, I have accidentally ran into page explaining solution to get rid of that annoying keyring password prompt.

Long story short:

  1. First, make sure your user password is the same as keyring password. If it isn’t, you may need to use gnome-keyring-manager to delete all existing keys, and next time when application would like to use keyring – just type new password, which would be the same as your user’s password.
  2. Install pam_keyring package.
  3. Add following lines to /etc/pam.d/gdm:
    auth    optional    pam_keyring.so try_first_pass
    session optional    pam_keyring.so

    However, don’t put these lines randomly (ie. at the end of file), apparently the order is important. Here is example from my system:

    #%PAM-1.0
    auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
    auth       required    pam_env.so
    auth       optional    pam_keyring.so try_first_pass
    auth       include     system-auth
    auth       optional    pam_gnome_keyring.so
    account    required    pam_nologin.so
    account    include     system-auth
    password   include     system-auth
    session    required    pam_selinux.so close
    session    include     system-auth
    session    required    pam_loginuid.so
    session    optional    pam_console.so
    session    optional    pam_keyring.so
    session    required    pam_selinux.so open
    session    optional    pam_keyinit.so force revoke
    session    required    pam_namespace.so
    session    optional    pam_gnome_keyring.so auto_start
  4. Reboot you computer, and enjoy having network access via NetworkManager without typing password (for example :).

Source: http://fedoraproject.org/wiki/Tools/NetworkManager

Comments are closed.