Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-08 Thread Josselin Mouette
Le dimanche 07 juin 2009 à 12:24 +0200, Mateusz Kaduk a écrit : First of all, you cutted out my first question. I think that typing password over and over each time is not what people using finger reader really want. A fingerprint reader is an authentication device; it is not an encryption

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-08 Thread Mateusz Kaduk
2009/6/8 Josselin Mouette j...@debian.org: Storing the key in clear text would *entirely* defeat the point of gnome-keyring. Maybe it could be possible to have two types of passwords * encrypted that needs login with password (smtp/pop/http/ssh...etc) * optionally stored the old way just hashed

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-08 Thread Josselin Mouette
Le lundi 08 juin 2009 à 12:42 +0200, Mateusz Kaduk a écrit : Maybe it could be possible to have two types of passwords * encrypted that needs login with password (smtp/pop/http/ssh...etc) * optionally stored the old way just hashed (ex. for connecting to access points) so you just set checkbox

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-07 Thread Josselin Mouette
Le samedi 06 juin 2009 à 12:32 +0200, Mateusz Kaduk a écrit : In current state libpam-gnome-keyring can unlock gnome-keyring only on password authentication. This is completly wrong since there might be other authenticatoin mechanisms such as * USB dongle authentication * Finger print

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-07 Thread Mateusz Kaduk
2009/6/7 Josselin Mouette j...@debian.org: You seem to be completely unaware of how gnome-keyring works. To unlock the keyring, which is stored encrypted on disk, you need a master password; this password is your login password. Being able to unlock the keyring without a password would mean it

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-07 Thread Josselin Mouette
Le dimanche 07 juin 2009 à 10:58 +0200, Mateusz Kaduk a écrit : I have read how gnome-keyring works before. Maybe its wrong design ? I think it shouldn't use login password to unlock keyring but custom generated key, which could be stored that way so only pam-gnome-keyring module can access

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-07 Thread Mateusz Kaduk
First of all, you cutted out my first question. I think that typing password over and over each time is not what people using finger reader really want. 2009/6/7 Josselin Mouette j...@debian.org: Where in the world would you store that key? Maybe /etc/security like cracklib does for storing

Bug#532088: libpam-gnome-keyring: Dont be selfish unlock gnome-keyring for other auth methods.

2009-06-06 Thread Mateusz Kaduk
Package: libpam-gnome-keyring Version: 2.26.1-1 Severity: important In current state libpam-gnome-keyring can unlock gnome-keyring only on password authentication. This is completly wrong since there might be other authenticatoin mechanisms such as * USB dongle authentication * Finger print