gnome-keyring-daemon hangs on login where no password is set

[starfear]

Binary package hint: gnome-system-tools

If change in users-admin ( password: Not asked on login ).
In next login gnome-keyring-daemon don't start properly.
Seahorse error: Couldn't communicate with key ring daemon.

If restore in users-admin ( password: Asked on login ).
In next login all right.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: gnome-system-tools 2.30.0-0ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic x86_64
NonfreeKernelModules: nvidia
Architecture: amd64
Date: Thu May 20 20:35:02 2010
ExecutablePath: /usr/bin/users-admin
ProcEnviron:
 LANGUAGE=ru_RU:en
 LANG=ru_RU.UTF-8
 SHELL=/bin/bash
SourcePackage: gnome-system-tools

[Milan Bouchet-Valat (nalimilan)]

Thanks for your report. This would be a bug in gnome-keyring-daemon, which should start and ask for the password if there's any.

Is the keyring daemon running or not? You can check this using 'ps x | grep gnome-keyring-daemon'. If it's not running at all, could you run 'gnome-keyring-daemon -sf' and post the output here?

[starfear (utdilya)]

With users-admin ( password: Not asked on login ).
ls -l /tmp/keyring-gOVWRx/
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 12:50 control
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 12:50 pkcs11
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 12:50 ssh
ps x
  1163 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize
  1468 pts/0 S+ 0:00 grep --color=auto keyring-daemon

With users-admin ( password: Asked on login ).When all right.
ps x
  1134 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
  1415 pts/0 S+ 0:00 grep --color=auto keyring-daemon
ls -l /tmp/keyring-svR2Fl/
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 13:01 control
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 13:01 pkcs11
  srwxr-xr-x 1 ilya ilya 0 2010-05-21 13:01 ssh

[Milan Bouchet-Valat (nalimilan)]

I'm able to reproduce the problem. Actually, gnome-keyring-daemon is hanging on login because with the --login option, it's waiting for the password to be passed by PAM via stdin, which never happens. While it's in this state, it won't anwser D-Bus messages, and will also prevent D-Bus from starting a new instance of the keyring, which would ask you for the password via a dialog.

Workaround is simply to run 'killall gnome-keyring-daemon'.

I've found a report upstream about the very same issue (but the link to the Launchpad report is wrong IMO).

[starfear (utdilya)]

But it's hanging when start with ( /usr/bin/gnome-keyring-daemon --daemonize )
without --login option.

[starfear (utdilya)]

I saw -
https://bugzilla.gnome.org/show_bug.cgi?id=619209

[Milan Bouchet-Valat (nalimilan)]

Le vendredi 21 mai 2010 à 12:20 +0000, starfear a écrit :
> But it's hanging when start with ( /usr/bin/gnome-keyring-daemon --daemonize )
> without --login option.
What do you mean? Have you ensured you had killed previous instances of
the daemon before starting it? How do you know it's hanging (running
Seahorse is a good test to see if it works)?

[starfear (utdilya)]

I mean:
When I login without prompt password,
With users-admin ( password: Not asked on login ).
ps x
  1163 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize
And it's hanging.
Seahorse error: Couldn't communicate with key ring daemon.

[Milan Bouchet-Valat (nalimilan)]

Indeed. I thought I had seen the contrary. So the problem lies somewhere else, we'd need to see if it's hanging in some function call, or if it's simply not grabbing the D-Bus name. It's not impossible that when logging in without password, the race condition described by bug 573387 happens. Just an hypothesis.

[Milan Bouchet-Valat (nalimilan)]

OK, this is actually a duplicate. We're debugging this upstream ATM.

[Milan Bouchet-Valat (nalimilan)]

Upstream has committed a fix which should be made available with gnome-keyring 2.30.2.

[Heinz Peter Hippenstiel (hphde)]

I confirm that using fingerprints the same behaviour appears as I already reported in 573387.

Using pam thinkfinger g-k-d does not have --login:
19611 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize

Using a password to login everything works fine:
19782 ? Sl 0:00 /usr/bin/gnome-keyring-daemon --daemonize --login

HP

PS: Nearby pam_winbind was causing troubles and I used 'sudo pam-auth-update --force' to fix it (disabled Winbind authentication) and maybe initially messed it up that way. I was not able to authenticate using my password but due to thinkfinger I still had the chance to recover.

[Sebastien Bacher (seb128)]

Cleaning the diffs and rejecting the upload, upstream just rolled a new update fixing a lock issue in the current tarball

[Sebastien Bacher (seb128)]

the new version has been uploaded now

[Martin Pitt (pitti)]

Accepted gnome-keyring into lucid-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

[starfear (utdilya)]

Ok.
I installed gnome-keyring and libpam-gnome-keyring, libpam-runtime, libpam0g, libpam-modules from "Proposed".

All right.
Thank you.

[Matthew L. Dailey (matthew-l-dailey)]

I can also verify that the -proposed (2.92.92.is.2.30.3-0ubuntu1) packages work well with no regressions noted here. They fix the specified bug as well as the related issue with winbind logins.

Thanks and I'll look forward to seeing this in -updates.

[Heinz Peter Hippenstiel (hphde)]

Works for me using thinkfinger.

Thank you.

HP

[Launchpad Janitor (janitor)]

This bug was fixed in the package gnome-keyring - 2.92.92.is.2.30.3-0ubuntu1

---------------
gnome-keyring (2.92.92.is.2.30.3-0ubuntu1) lucid-proposed; urgency=low

  * New upstream version:
    - Fix possible race condition in gp11 library.
    - Use proper locking for secure memory in daemon.
    - Fix broken startup when used with gdm and password-less login.
      (lp: #583428)
    - Fix checking of uninitialized value in prompting code.
    - Make sure the service files are created correctly
    - Add dbus activation service file for org.freedesktop.secrets
    - Build fixes of *.desktop and *.service files
  * debian/patches/03_use_in_xfce.patch,
    debian/patches/05_login_unlock_string.patch:
    - new version update
  * debian/patches/90_git_dbus_activation_service.patch,
    debian/patches/91_git_correct_service.patch,
    debian/patches/92_git_correct_variable_checking.patch:
    - the changes are in the new version
  * debian/patches/99_autoreconf.patch:
    - not required without the previous changes
 -- Sebastien Bacher <email address hidden> Mon, 21 Jun 2010 15:41:01 +0200

[Martin Pitt (pitti)]

Copied to maverick, too.