[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I've tried every password I've ever thought about, but I still can't make Evolution function as I don't know how that keyring came into being. My user was never created on this machine, as they are created on the server where no fancy-pants keyrings exist. So I guess Ubuntu just made one the first time I logged in and used NULL as password or something, because it's impossible to unlock it. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Thanks for the bug report. This particular bug has already been reported, but feel free to report any other bugs you find. The passwd pam configuration needs to be updated there is a bug open already about that request ** Changed in: gnome-keyring (Ubuntu) Importance: Undecided => Low Assignee: (unassigned) => Ubuntu Desktop Bugs (desktop-bugs) Status: New => Invalid -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
the bug is similar to the other requests and not a gnome-keyring issue but the job of the tools used to change the password rather -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
This is not the job of the tools used to change the password. It is not the responsibility of say, "Active Directory Users and Computers" or "ldappasswd" or "kpasswd" to know that libpam-gnome-keyring is used on some arbitrary machine elsewhere and somehow go and change the keyring password on that other machine. It is clearly the responsibility of gnome-keyring to handle the situation gracefully when the password has been changed elsewhere, outside of its control. ** Changed in: gnome-keyring (Ubuntu) Status: Invalid => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
what do you suggest? there is no reason the gnome-keyring password and the login one should be identical and gnome-keyring can read the user password since that would mean this one would be stored in clear somewhere ** Changed in: gnome-keyring (Ubuntu) Status: New => Incomplete -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
By default, libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? I see no reason that this should stop working just because the user's login password was changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
> libpam-gnome-keyring unlocks the gnome keyring using the login password, correct? not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the password that you typed, if you happen to have the same password for login and gnome-keyring that works but otherwise that doesn't -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Fair enough, it *attempts* to open the keyring with the login password. On a fresh install of Ubuntu, the passwords are the same, so the process is invisible to the user until the password is changed. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
how would you suggest it to know about system password changes and the new password to use? -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
It would know about the password change because the password wouldn't work to unlock the keyring. The new password would obviously be the new user login password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
nothing force the use of a similar password for the login and ngome- keyring so unlocking not working would not mean that the password change, there is also no automatic way to read a password or it would mean the storage would not been secure since another software could read and copy it for example -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Oh, and: 5b. If it's not possible to prompt for the old password like this, remove the keyring entirely and create an entirely new one with the new password. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
reopening as a wishlist request ** Changed in: gnome-keyring (Ubuntu) Importance: Low => Wishlist Status: Incomplete => New -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I agree that nothing forces the use of a similar password. However, it is the default on a fresh Ubuntu install. One possibility would be for gnome-keyring to have a configuration flag that would indicate if the password should be synchronised with the system password. No cleartext stored password should be necessary. So the sequence would go: 1. On an Ubuntu fresh install the password sync flag would be set, and keyring password would be the same as the login password. 2. User's password is changed externally. 3. User logs in. The password is accepted for login, but does not unlock the keyring. 4. libpam-gnome-keyring has the new password since the user just logged in with it. 5. libpam-gnome-keyring needs the old password, so it prompts for it. 6. libpam-gnome-keyring changes the keyring password and unlocks the keyring. 7. The user changes the keyring password manually. 8. The password sync flag is cleared, and so libpam-gnome-keyring should no longer do steps 5 and 6. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
Having just fallen foul of this myself, I thought it worth noting that the keyring password prompt on Intrepid specifically asks for the *login* password. This is very confusing because what it actually wants is the keyring password, which won't be the same once the user has changed their login password. If the prompt hasn't been changed in Jaunty, it probably should be. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
[Bug 322827] Re: libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used
I just added bug #376225 before finding this. I'll leave it to others to decide whether to mark as a duplicate, since this bug is supposedly about LDAP, Active Directory, or Kerberos also. However, I think I can contribute to this discussion. Sebastien Bacher wrote: > how would you suggest it to know about system password changes and the new > password to use? The mechanism has already existed at one point, see /usr/share/doc/gnome-keyring/README.Debian. It suggests you add the following line to /etc/pam.d/common-password: password optional pam_gnome_keyring.so I tried this and it does not work, it must have been broken at some point. To fix this bug, I suggest you fix this feature, and make it the default. I'd also like to say, however, that I feel marking this bug as "Wishlist" is inappropriate. Two people I know spent months being forced to type their old, long-obsoleted passwords just so NetworkManager would allow them on their wireless network. This is a bug. Sebastien Bacher wrote: > not really no, libpam-gnome-keyring try to unlock the gnome-keyring using the > password that you typed, if you happen to have the same password for login > and gnome-keyring that works but otherwise that doesn't Then this behavior should be changed, it's as simple as that. You're talking about preserving a severe usability issue, for the sake of a feature that is completely useless to almost anybody. You could consider following Alex Mauer's step-by-step suggestion to keep the option available. Otherwise, just forget about it, and tie the login keyring to the login password. No one will mind and many will be helped. -- libpam-gnome-keyring: keyring password should be updated or cleared when a new system password is used https://bugs.launchpad.net/bugs/322827 You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is a bug assignee. -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
