After logging in by thinkfinger, I have to give nm-applet access to keyring by typing in password

Bug #221900 reported by Jesper de Jong
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gnome-keyring (Ubuntu)
Ubuntu Desktop Bugs

Bug Description

Binary package hint: gnome-keyring

My laptop (Dell XPS M1530) has a fingerprint reader. I installed the packages thinkfinger-tools and libpam-thinkfinger, and edited /etc/pam.d/common-auth as described here: to make it possible to login by swiping my finger. My /etc/pam.d/common-auth now contains these lines:

auth sufficient
auth try_first_pass nullok_secure

I have a WiFi network and the WPA2 password is in the GNOME keyring.

Problem: After logging in by swiping my finger, I get a dialog to enter my password to let nm-applet access the GNOME keyring (for the WiFi network password).

This does not happen if I login by typing in my password instead of swiping my finger.
Note that the keyring access dialog does not accept swiping my finger; I really have to type in my password.

Ubuntu 8.04 x86_64

Revision history for this message
Rob Escriva (me-robescriva) wrote :

I don't think this is a bug. The thinkfinger package is for libpam. The keyring does not use pam to authenticate.

If you read the known issues on the place to which you linked it say the same thing.

Revision history for this message
Jesper de Jong (jespdj) wrote :

Bug or not, it is a problem - I use the fingerprint reader so that I don't have to type my password, but now I still have to type my password... it defeats the purpose of the fingerprint reader.

Maybe it's an enhancement request: Make GNOME keyring work with PAM / libpam-thinkfinger or make it work with the fingerprint reader some other way.

When logging in by password, GNOME keyring does not ask for the password. So there must be some link between PAM / logging in and the keyring manager. This link should also work if I login by fingerprint.

Revision history for this message
Rob Escriva (me-robescriva) wrote :
Revision history for this message
Sebastien Bacher (seb128) wrote :

gdm has some pam integration to unblock the keyring, you might want set a blank password to your keyring to workaround the issue

Changed in gnome-keyring:
assignee: nobody → desktop-bugs
importance: Undecided → Wishlist
Revision history for this message
Sebastien Bacher (seb128) wrote :

that's not a gnome-keyring bug

Changed in gnome-keyring:
status: New → Invalid
Revision history for this message
LaTrell (donald-osborne) wrote :

I have the same laptop Dell M1530 and I am having problem with the fingerprint acknowledging the installs. I followed all the procedures and still nothing not even a simple ask to scan. Anyways to remove files that were installed that are not working to start the procedures again? JesperDJ, do you still have the procedures to loading your installs. Currently installing Skype hopethis work.

Thanks for any and all assistant


Revision history for this message
Jesper de Jong (jespdj) wrote :

LaTrell: I'm not using ThinkFinger because it's useless if I still have to type in my password for different programs. I haven't found any really good workarounds to make it work with all programs that need the password to be typed in. There are unfortunately some things missing in Ubuntu to integrate the use of the fingerprint reader fully into the system.

You can uninstall the packages that you've installed the same way you uninstall any other software package (with Synaptic or "sudo apt-get remove ...").

Revision history for this message
Sean Hodges (seanhodges) wrote :

Support for PAM in gnome-keyring would be VERY desirable. Not just for thinkfinger, but to support a whole host of authentication methods (USB dongle authentication, bluetooth authentication by proximity of mobile phone...)

In my opinion, this should be considered as a high priority enhancement, because the gnome-keyring program is an integral component of the Gnome desktop, and widely used.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers