Comment 27 for bug 932177

Revision history for this message
Chris Bainbridge (chris-bainbridge) wrote : Re: WARNING: gnome-keyring:: couldn't connect to PKCS11

I was interested in the correct solution rather than the workaround of manually reverting the changes to gnome-keyring's /etc/ config. I asked Guido Berhoerster, and he said:

"if you are not running gnome-session then gnome-keyring-daemon cannot be correctly initialized through the XDG autostart mechanism because the necessary environment variables cannot be set for your session (see my detailed explanation at https://bugzilla.novell.com/show_bug.cgi?id=710038#c2). So what that basically means is that whether you initialize gnome-keyring through XDG autostart or not does not make any difference outside GNOME because it will be inaccessible from your session.

In order to use gnome-keyring with Xfce you need to enable "GNOME compatibility mode", if you use something else you need to modify your session wrapper so that it calls "gnome-keyring-daemon --start", reads its output and exports the printed environment variables. That assumes of course that gnome-keyring-daemon has been correctly started and unlocked via PAM.

...starting with openSUSE 12.2 gnome-keyring will be installed and enabled by default. It is also possible to use gnome-keyring with Xfce on openSUSE 12.1 since we patch xfce4-session to avoid undesirable side effects of GNOME compat mode in Xfce 4.8 (https://bugzilla.xfce.org/show_bug.cgi?id=8014#c0), however GNOME compatibility mode needs to be enabled manually.

Making it work is relatively simple starting with Xfce 4.10 you just need to follow https://live.gnome.org/GnomeKeyring/Pam and enable GNOME compat mode.

For Xfce 4.8 it is more complicated because xfce4-session would need to be patched with backports of commit 0fea8c64bfc32915d9e397e7029de150167a737d and 67b772364c9e9a7ea9cc4dafb219902c6c8b074a in order to make GNOME compat mode usable."