Package: libpam-keyring Version: 0.0.8-4 Severity: normal
The file /etc/pam.d/pam-ssh-auth from libpam-ssh package loads a module with a "sufficient" priority. Thus "auth optional pam_keyring.so try_first_pass" from /etc/pam.d/common-pamkeyring is not executed. /etc/pam.d/common-pamkeyring should be splitted in /etc/pam.d/pam-keyring-auth: -----8<---------------------------------------------------------------------- auth optional pam_keyring.so try_first_pass -----8<---------------------------------------------------------------------- and /etc/pam.d/pam-keyring-session: -----8<---------------------------------------------------------------------- session optional pam_keyring.so -----8<---------------------------------------------------------------------- What makes it possible the following /etc/pam.d/gdm file to work: -----8<---------------------------------------------------------------------- auth requisite pam_nologin.so auth required pam_env.so readenv=1 auth required pam_env.so readenv=1 envfile=/etc/default/locale @include common-auth @include pam-keyring-auth @include pam-ssh-auth @include common-account session required pam_limits.so @include common-session @include pam-keyring-session @include pam-ssh-session @include common-password -----8<---------------------------------------------------------------------- -- System Information: Debian Release: 4.0 APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-4-686 Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15) Versions of packages libpam-keyring depends on: ii gnome-session 2.14.3-5 The GNOME 2 Session Manager ii libc6 2.5-0exp3 GNU C Library: Shared libraries ii libglib2.0-0 2.12.9-2 The GLib library of C routines ii libgnome-keyring0 0.6.0-3 GNOME keyring services library ii libpam0g 0.79-4 Pluggable Authentication Modules l libpam-keyring recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
