[Bug 1451865] Re: Kwallet is no longer automatically unlocked on login

Wed Jul 22 07:19:35 UTC 2015

Launchpad has imported 12 comments from the remote bug at
https://bugs.kde.org/show_bug.cgi?id=349003.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2015-06-10T21:13:20+00:00 Leon Maurer wrote:

In many ways, this is a continuation of bug 92845. Details are available
there.

A long-standing feature request was for single-sign-on -- where logging
in would automatically unlock kwallet. (A very useful feature.) The
issue was raised in 2004 with bug 92845 and was finally addressed in
2014. However, about a year later, this feature was removed with the
transition to KDE 5.

Please bring this feature back! (We already waited a decade!)

Reproducible: Always

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/4

------------------------------------------------------------------------
On 2015-06-11T04:05:24+00:00 Brix-g wrote:

oh yes please.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/5

------------------------------------------------------------------------
On 2015-06-11T11:31:10+00:00 Till Schäfer wrote:

With the gnupg backend this may shift towards a pam module to unlock the
gpg key similar to  pam_ssh [1].

[1] http://www.unix.com/man-page/debian/8/pam_ssh/

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/6

------------------------------------------------------------------------
On 2015-06-11T17:15:59+00:00 Murz wrote:

Seems that in Kubuntu 15.04 there are some improvements on this feature:
I see signon-kwallet-extension and pam-kwallet packages. Is this
packages from KDE or Ubuntu developers?

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/7

------------------------------------------------------------------------
On 2015-06-11T17:33:47+00:00 Leon Maurer wrote:

@Murz,

I contact the Kubuntu folks first and they said that there wasn't
anything they could do: https://bugs.launchpad.net/ubuntu/+source
/kubuntu-meta/+bug/1451865

Still, I'd be curious to know about those packages.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/8

------------------------------------------------------------------------
On 2015-06-14T07:35:58+00:00 8-kde wrote:

Hello Alex, pam-kwallet is still in your scratch repositories. I think
pam-kwallet should end in KF5::Wallet framework, into the runtime
directory.

Do you plan to port it to KF5? Do you need help with that?

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/9

------------------------------------------------------------------------
On 2015-06-14T22:30:59+00:00 Alex Fiestas wrote:

I don't have plans (or time) at this very moment, so please feel free to
take over.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/10

------------------------------------------------------------------------
On 2015-07-16T09:55:01+00:00 Cjacker wrote:

Created attachment 93611
patch to kf5 kwallet

patch to kf5 kwallet, enable pam_kwallet support. codes directly token
from kde4.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/11

------------------------------------------------------------------------
On 2015-07-16T09:58:04+00:00 Cjacker wrote:

Created attachment 93612
patch to pam-kwallet git codes.

git clone git://anongit.kde.org/scratch/afiestas/pam-kwallet.git
And apply this patch.

changes:
1, kdehome not needed anymore, since kwalletd store files in ~/.local/share/kwalletd/
2, Change path of kdewallet.salt accordingly.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/12

------------------------------------------------------------------------
On 2015-07-16T10:10:45+00:00 Cjacker wrote:

pam_kwallet still had some limitions:

1, it only handle wallet named 'kdewallet'.

2, If you had 'kdewallet' created already, need to set the wallet
password as same as account password.

3, it did not implement 'pam_sm_chauthtok' currently, that's to say, use
'passwd' utility  to change account password,  will NOT change 'wallet'
password, kwallet still use the old password, you need to change it
manually.

I checked kwalletd/kwallet codes and found it is REALLY difficult to
change runtime kwallet password via pam_sm_chauthtok.  kwallet load
everything to memory, if password changed via kwalletmanager5, it will
sync back via kwallet backend.  change 'salt' from outside can not
change the password of wallet.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/13

------------------------------------------------------------------------
On 2015-07-20T13:04:55+00:00 kolAflash wrote:

@Cjacker
Please keep in mind: Those limitations might be ugly. But the core functionality of pam_kwallet (logging in without typing the password twice) is what people really need! So that should have priority.

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/14

------------------------------------------------------------------------
On 2015-07-22T01:54:47+00:00 Leon Maurer wrote:

@Cjacker I'm not in a position to test your patch, but I may owe you a
beer. Thanks for helping out!

Reply at: https://bugs.launchpad.net/ubuntu/+source/kubuntu-
meta/+bug/1451865/comments/15

** Changed in: kdelibs
   Importance: Unknown => Wishlist

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kubuntu-meta in Ubuntu.
https://bugs.launchpad.net/bugs/1451865

Title:
  Kwallet is no longer automatically unlocked on login

To manage notifications about this bug go to:
https://bugs.launchpad.net/kdelibs/+bug/1451865/+subscriptions