LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 05-13-2020, 06:40 PM   #1
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Rep: Reputation: Disabled
keyring unlock


Debian 10.4 XFCE
After installing brave browser, I'm asked to unlock the keyring the first time I launch brave.
Is there a way to solve this without leaving it with a blank passwd?
 
Old 05-13-2020, 06:49 PM   #2
dugan
LQ Guru
 
Registered: Nov 2003
Location: Canada
Distribution: distro hopper
Posts: 11,235

Rep: Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320
Generally speaking, don't use passwordless logins, and set your login keyring's password to your login password.
 
Old 05-13-2020, 07:20 PM   #3
frankbell
LQ Guru
 
Registered: Jan 2006
Location: Virginia, USA
Distribution: Slackware, Ubuntu MATE, Mageia, and whatever VMs I happen to be playing with
Posts: 19,332
Blog Entries: 28

Rep: Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144Reputation: 6144
Or, if you are not and have no intention of using the keyring, just make it go away.

I use Keepassx(c) for my passwords, and find those nagging keyrings quite annoying.
 
Old 05-14-2020, 12:54 PM   #4
dugan
LQ Guru
 
Registered: Nov 2003
Location: Canada
Distribution: distro hopper
Posts: 11,235

Rep: Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320Reputation: 5320
I use the keyring to store my SSH and git credentials.
 
Old 05-15-2020, 09:00 PM   #5
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
Thanks for responding, but I still have no clue how to fix this
I've 2 machines running the same OS, I don't know what I did but one is perfectly working when the other not, for sure they have different apps installed, probably I did something different on installing, actually I don't know
 
Old 05-16-2020, 03:24 AM   #6
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Do you enter your password when you log in, on both machines?
 
Old 05-17-2020, 10:22 AM   #7
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
Yes I do, user and password
 
Old 05-18-2020, 12:35 PM   #8
ondoho
LQ Addict
 
Registered: Dec 2013
Posts: 19,872
Blog Entries: 12

Rep: Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053Reputation: 6053
Brave is essentially Chromium, and over the years I have seen Chrom/e/ium users complain about this a lot.
This might help you to formulate search terms.
Or look at the list of similar threads just below the last post.
 
Old 05-21-2020, 12:42 PM   #9
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
Brave keyrings are stored in /etc/apt/trusted.gpg.d

133208 -rw-r--r-- 1 root root 2.8K Mar 18 17:35 brave-browser-release.gpg
133207 -rw-r--r-- 1 root root 0 May 21 09:28 brave-browser-release.gpg~

Deleting these files stops asking to unlock the keyring

I kept looking and comparing with other Debian box, in which is working properly, I realized that I have one keyring called Login in which apps passwd are in. And this login Keyring is unlocked at login.
In the other box, the one I've troubles there are 2 keyrings, the login and a default and no one is unlocked at login.

What would be the right way to get rid of the default keyring and passing everything to the Login-Keyring?
 
Old 05-22-2020, 02:31 PM   #10
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
Meanwhile I've learned that the keyring is managed by the display manager and pam as well, I've checked several config files and compared them to a working box without finding any differences
Xsession under /etc/X11
lightdm and login under /etc/pam.d/lightdm
baschrc
Xfce Session under /usr/share/xsessions/xfce.desktop

Is there any other place I should be looking for?
 
Old 05-22-2020, 03:07 PM   #11
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
I made some changes so as to see what happens, I modified pam config for lightdm enabling the login keyring as auto start
these 2 lines are disabled with a dash on the front which I removed. The working debian box has these 2 lines dashed and works well

auth optional pam_gnome_keyring.so
session optional pam_gnome_keyring.so auto_start

the result is that the login-keyring gets now unlocked, the default-keyring remains unlocked until an app is started which needs a keyring. Every thing looks to work well

Few questions
In the working box I have just one keyring, the login-keyring
In the troubled box I have 2 keyrings, default and login, none of both got unlocked at login
As I sad before both machines asks for login user/passwd at boot

what should be the right or expected way to setup keyrings properly, with just a login-keyring or both login + default?
I don't remeber having made any choices on this at install time
the troubled box has just a key inside de login-keyring whith unlock-password for default keyring
I don't know what sense does it make this?

I appreciate any disclousure on this
 
Old 05-23-2020, 11:14 AM   #12
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
Actually nothing changed, the day after when I booted I realized that everything behaves the same, the login-keyring keeps locked after entering user/passwd
So I've reverted the changes at /etc/pam.d/lightdm
and did following changes to /etc/pam.d/login

added
session optional pam_gnome_keyring.so auto_start
commented
session optional pam_keyinit.so force revoke

what's the use of this last line, probably I should keep it

Last edited by Beerforfree; 05-23-2020 at 11:42 AM.
 
Old 05-27-2020, 08:38 AM   #13
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
At /etc/pam.f/login

I've uncommented de 1st line and added de 2nd
session optional pam_keyinit.so force revoke
session optional pam_gnome_keyring.so auto_start

I've deleted the default-keyring and just kept the login-keyring
I've deleted the brave-key, but this is regenrated on the next boot

Nothing solved the issue
the login-keyring doesn't get automatically unlocked on login, it shouldn't be that difficult to solve this, I assume that some setting is wrong, but no clue what
 
Old 05-27-2020, 09:41 AM   #14
uteck
Senior Member
 
Registered: Oct 2003
Location: Elgin,IL,USA
Distribution: Ubuntu based stuff for the most part
Posts: 1,173

Rep: Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501Reputation: 501
Have you looked in the settings for the key-ring app to see if you can unlink the browser to it?
 
Old 05-27-2020, 10:41 AM   #15
Beerforfree
Member
 
Registered: Sep 2019
Location: Argentina, Buenos Aires
Distribution: Debian 10.4 XFCE
Posts: 40

Original Poster
Rep: Reputation: Disabled
I don't know where to find this one, at least it isn't under pam.d. Will give a look to my other Debian box, I think I saw it once

I've tried these changes on lightdm, which didn't work in the past
I've enabled these both
auth optional pam_gnome_keyring.so
session optional pam_gnome_keyring.so auto_start

I've commented this line on login under pam.d (still no idea what this does)
#session optional pam_keyinit.so force revoke

And know seems to work, I'll play around for a while to see which change brought the solution.
whether the "auto_start" on both config files or the "force revoke" was
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
how to remove "Enter password for default keyring tu unlock" Revanvar Linux - Newbie 4 11-20-2015 11:49 AM
Keyring keyring Go away come again another day sephox Linux - Software 2 01-01-2012 05:45 PM
Enter Password for Default Keyring to Unlock Ubuntu213 Linux - Newbie 4 12-30-2010 03:05 PM
Unlock keyring at login for NetworkManager and wireless in KDE michael.guerrero Linux - Software 0 05-08-2009 02:50 PM
LXer: Auto-Unlock Keyring Manager In Ubuntu Intrepid LXer Syndicated Linux News 1 05-03-2009 03:01 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 10:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration