Date: Thu, 17 Jul 2008 14:11:42 -0400 From: Joe Marcus Clarke <marcus@marcuscom.com> To: Marcin Wisnicki <mwisnicki+freebsd@gmail.com> Cc: freebsd-gnome@freebsd.org Subject: Re: [RFC] Getting GnomeKeyring + PAM to work out of the box Message-ID: <1216318302.41822.42.camel@shumai.marcuscom.com> In-Reply-To: <g5o1cc$9lk$1@ger.gmane.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] On Thu, 2008-07-17 at 18:00 +0000, Marcin Wisnicki wrote: > Increasing number of Gnome and third-party applications are using > GnomeKeyring for their key/password storage needs. > > Currently this means that after every login one have to enter key for > every keyring (usually just 1). > Most linux distributions automate this with a help of pam_keyring module. > This system is well described here: http://live.gnome.org/GnomeKeyring/Pam > > Fortunately all necessary ingredients are already present in the system, > they just need proper configuration. > > For this to work in a plug-and-play manner I propose following changes: > > 1. Move /etc/pam.d/gdm from base system to x11/gdm port > 2. Add KEYRING option (enabled by default) to x11/gdm that: > (1) Adds runtime dependency on security/gnome-keyring > (2) Appends/uncomments pam_keyring lines in pam.d/gdm so it looks like > this (maybe it makes more sense to just "include system" ?): > > === gdm.in (to be installed as /usr/local/etc/pam.d/gdm) === > auth required pam_unix.so no_warn try_first_pass > auth optional %%LOCALBASE%%/lib/security/pam_gnome_keyring.so > > account required pam_nologin.so > account required pam_unix.so > > session required pam_permit.so > session optional %%LOCALBASE%%/lib/security/pam_gnome_keyring.so auto_start > === 8< === > > I can provide patches if gnome@ agrees to the changes. Yeah, please do. Joe -- PGP Key : http://www.marcuscom.com/pgp.asc [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (FreeBSD) iEYEABECAAYFAkh/i10ACgkQb2iPiv4Uz4e1KgCgjCoXcJpm2SHjcfVj132cas2R I24AoK3xIW86oi+d2G5bPY6aA1ApeWj3 =hqRT -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1216318302.41822.42.camel>