https://bugs.kde.org/show_bug.cgi?id=523033
Bug ID: 523033
Summary: KWallet does not unlock automatically during
auto-login sessions, even when the user password
matches the LUKS encryption password.
Classification: Applications
Product: kwalletmanager
Version First unspecified
Reported In:
Platform: Other
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
SUMMARY
KWallet does not unlock automatically during auto-login sessions, even when the
user password matches the LUKS encryption password.
STEPS TO REPRODUCE
1. Set up full disk encryption using LUKS during OS installation.
2. Ensure the user account password matches the LUKS decryption passphrase.
3. Enable "Automatic Login" via System Settings > Login Screen > Behavior.
4. Reboot the system.
OBSERVED RESULT
The system decrypts via LUKS, bypasses the SDDM login screen, and lands on the
desktop. However, KWallet remains locked. The user is immediately prompted to
enter their password to unlock the wallet when applications (like Brave,
Chrome, or Wi-Fi) request credentials. (Note: GNOME Keyring previously handled
this scenario seamlessly on the same machine configuration in Fedora).
EXPECTED RESULT
KWallet should ideally unlock automatically by utilizing the credentials
provided at the LUKS decryption stage, or the system should gracefully hand off
the authentication token to pam_kwallet during an auto-login sequence without
requiring a secondary manual prompt.
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Fedora 44
KDE Plasma Version: 6.7.2
KDE Frameworks Version: 6.27.0
Qt Version: 6.11.1
ADDITIONAL INFORMATION
This issue creates a significant friction point for users migrating from GNOME
to KDE Plasma who rely on full disk encryption combined with automatic desktop
login. Because the password typed at the LUKS stage is discarded before PAM can
intercept it for KWallet, the auto-login feature effectively forces a manual
password prompt anyway, defeating the purpose of auto-login.
--
You are receiving this mail because:
You are watching all bug changes.
