Lubuntu 12.04 missing libpam-gnome-keyring

[DuckHook]

Lubuntu 12.04 is missing the gnome keyring pam module libpam-gnome-keyring as part of its default install. This makes it impossible to link the "default" keyring to the "login" keyring, thus requiring users to unlock the default keyring as a separate action after login. It's an annoyance with effects disproportionate to its cause due to the fact that users are advising each other to delete their keyring altogether as a workaround to get rid of the annoying pop-up. Needless to say, this creates serious security holes.

[Marc Deslauriers (mdeslaur)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[John Hupp (john.hupp)]

I'm on Lubuntu 12.10 and just installed Ubuntu One, which is the only online sync service offered in the main repos. I too, find that the separate keyring login is an annoyance and would like to link the default keyring to the login keyring. (Is that the same as setting up the default keyring with automatic login?)

Is there a work-around (other than deleting the keyring)? Can I install libpam-gnome-keyring or gnome-keyring-manager to enable this sort of configuration? Or do something else?

[Duckhook (duckhook-deactivatedaccount)]

The fix/workaround is as follows:

1. Do:

sudo apt-get install libpam-gnome-keyring

2. Logout
3. Login
4. When the pop-up for unlocking the default keyring comes up, do not simply type in the password to unlock. Instead, click "details" and select the "automatically unlock this keyring on login" radio button. Then enter your password to unlock the default keyring. You will now have linked the default keyring to the login keyring. Even if the pam module was installed, it is possible that the link was not established. In that case, the last portion of these instructions may still solve the problem.

[John Hupp (john.hupp)]

Thanks. I hadn't initially realized that with a bug in which "this is missing ... makes it impossible," the workaround could be so simple as "install what's missing!"