主页 / unix / 问题 / 707542
Accepted
laur
Asked: 2022-06-26 15:09:11 +0800 CST

登录时解锁 gnome-keyring

  • 772

运行 debian 测试，没有显示管理器，i3 窗口管理器。 gnome-keyring&libpam-gnome-keyring软件包已安装。在 /etc/pam.d/login 的末尾添加了以下 2 行：

auth       optional     pam_gnome_keyring.so
session    optional     pam_gnome_keyring.so auto_start

密钥环由 systemd @ 启动/etc/systemd/user/graphical-session-pre.target.wants/gnome-keyring-daemon.service，但也尝试从 xinitrc 替换它：

eval $(/usr/bin/gnome-keyring-daemon --replace --components=gpg,pkcs11,secrets,ssh)

/var/log/auth.log 有以下来自操作系统登录：

Jun 26 00:35:39 p14s su[1409]: (to laur) root on none
Jun 26 00:35:39 p14s su[1409]: pam_unix(su:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:39 p14s systemd: pam_unix(systemd-user:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:39 p14s su[1409]: pam_unix(su:session): session closed for user laur
Jun 26 00:35:41 p14s su[1922]: (to laur) root on none
Jun 26 00:35:41 p14s su[1922]: pam_unix(su:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:42 p14s su[1922]: pam_unix(su:session): session closed for user laur
Jun 26 00:35:42 p14s su[2005]: (to laur) root on none
Jun 26 00:35:42 p14s su[2005]: pam_unix(su:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:42 p14s login[1174]: gkr-pam: unable to locate daemon control file
Jun 26 00:35:42 p14s login[1174]: gkr-pam: stashed password to try later in open session
Jun 26 00:35:42 p14s login[1174]: pam_unix(login:session): session opened for user laur(uid=1000) by LOGIN(uid=0)
Jun 26 00:35:42 p14s systemd-logind[1003]: New session 2 of user laur.
Jun 26 00:35:42 p14s login[1174]: gkr-pam: unlocked login keyring <----- this should be success, right?
Jun 26 00:35:42 p14s su[2005]: pam_unix(su:session): session closed for user laur
Jun 26 00:35:42 p14s su[2078]: (to laur) root on none
Jun 26 00:35:42 p14s su[2078]: pam_unix(su:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:42 p14s su[2078]: pam_unix(su:session): session closed for user laur
Jun 26 00:35:45 p14s polkitd(authority=local): Registered Authentication Agent for unix-session:2 (system bus name :1.81 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8)
Jun 26 00:35:46 p14s gnome-keyring-daemon[2026]: The Secret Service was already initialized
Jun 26 00:35:46 p14s gnome-keyring-daemon[3062]: discover_other_daemon: 1
Jun 26 00:35:48 p14s su[4284]: (to laur) root on none
Jun 26 00:35:48 p14s su[4284]: pam_unix(su-l:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:50 p14s su[4284]: pam_unix(su-l:session): session closed for user laur
Jun 26 00:35:50 p14s su[4365]: (to laur) root on none
Jun 26 00:35:50 p14s su[4365]: pam_unix(su-l:session): session opened for user laur(uid=1000) by (uid=0)
Jun 26 00:35:50 p14s su[4365]: pam_unix(su-l:session): session closed for user laur
Jun 26 00:35:50 p14s su[4402]: (to laur) root on none
Jun 26 00:35:50 p14s su[4402]: pam_unix(su-l:session): session opened for user laur(uid=1000) by (uid=0)

也尝试删除现有的密钥环，以重新创建。密钥环与我的用户登录密码相同。

仍然没有喜悦。如何在 2022 年解决这个问题？

debian pam

1 个回答

  1. Best Answer

    想我把它整理好了。没有深入了解是怎么回事，但是和dbus有关系。问题是 i3 的启动方式~/.xinitrc：

    exec dbus-run-session i3

    我猜它会导致 keyring-daemon 绑定到与 i3 不同的 dbus 会话（并且，通过扩展，用户空间中的大多数其他内容）。为了克服这个问题，我现在~/.xsession改为通过 systemd 启动 i3；注意我已经完全删除了 ~/.xinitrc。

    $ cat ~/.xsession
systemctl --user import-environment
systemctl --user daemon-reload

# note we add the 'wait' flag, which disallows immediate exit, which in turn would stop X session right after it.
exec systemctl --user start --wait xsession.target

    startx 不带参数启动：exec startx

    相关系统单位：

    $ tree -a ~/.config/systemd/user/
├── i3wm.service
├── xsession.target
└── xsession.target.requires
    └── i3wm.service -> ../i3wm.service
    
$ cat ~/.config/systemd/user/i3wm.service 
[Unit]
Description=i3 Window Manager
PartOf=graphical-session.target

[Service]
ExecStart=/usr/bin/i3
ExecStopPost=/usr/bin/systemctl --user stop graphical-session.target
Restart=on-failure

[Install]
RequiredBy=xsession.target

$ cat ~/.config/systemd/user/xsession.target
[Unit]
Description=X session managed by systemd
BindsTo=graphical-session.target

    加密的密钥环现在按预期在登录时由 PAM 解锁。/etc/pam.d/login请注意，仍然非常需要按照问题中所述添加的这两行。

    由本博客提供

    • 1

相关问题