PAM KWallet integration not working

[Jonathan L. Verner]

I have recently installed Trusty Tahr which advertises kwallet & lightdm integration.
However this does not seem to work (note that my login password and my wallet password
ARE the same). I am not sure now but I think that the first time I logged in
(after resetting the password on my wallet to make it the same as the login password)
it worked, however now it does not work.

Output of lsb_release -rd:

Description: Ubuntu 14.04 LTS
Release: 14.04

Output of apt-cache policy pam-kwallet:

pam-kwallet:
  Instalovaná verze: 0.0~git20140410-0ubuntu2.1
  Kandidát: 0.0~git20140410-0ubuntu2.1
  Tabulka verzí:
 *** 0.0~git20140410-0ubuntu2.1 0
        500 http://cz.archive.ubuntu.com/ubuntu/ trusty-updates/universe amd64 Packages
        100 /var/lib/dpkg/status
     0.0~git20140410-0ubuntu2 0
        500 http://cz.archive.ubuntu.com/ubuntu/ trusty/universe amd64 Packages

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: pam-kwallet 0.0~git20140410-0ubuntu2.1
ProcVersionSignature: Ubuntu 3.13.0-30.54-generic 3.13.11.2
Uname: Linux 3.13.0-30-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.2
Architecture: amd64
CurrentDesktop: KDE
Date: Fri Jun 27 14:21:31 2014
EcryptfsInUse: Yes
InstallationDate: Installed on 2014-06-16 (10 days ago)
InstallationMedia: Kubuntu 14.04 LTS "Trusty Tahr" - Release amd64 (20140416.1)
SourcePackage: pam-kwallet
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[stargazer (stargazer05)]

See bug https://bugs.launchpad.net/ubuntu/+source/pam-kwallet/+bug/1309955

It also triggers a zombie process kwalletd . After the uninstall of pam-kwallet the zombie process is gone.

[stargazer (stargazer05)]

Discussions and Bugreports;

https://forum.kde.org/viewtopic.php?f=14&t=120843

https://www.dennogumi.org/2014/04/unlocking-kwallet-with-pam/

https://bbs.archlinux.org/viewtopic.php?pid=903106

[Donatas Glodenis (dgvirtual)]

It also affects Kubuntu Vivid. However, there is a twist to it, which might be true of other affected systems as well.

I do have to enter kdewallet password after I log in through SDDM - pam-kwallet does not work in that case. But if, before I log in through SDDM, I login through one of the virtual consoles into the text mode (hit Ctrl+Alt+F1 and enter my credentials), and login through SDDM afterwards, I do not have to enter kdewallet password - pam-kwallet works in that case.

Now, I noticed about the original reporter, that he uses encrypted home directory (EcryptfsInUse: Yes). I do use it as well. I created a user without encrypted home directory, and for that user pam-kwallet works as expected.

So my guess is that the bug is related somehow to the fact that the home directory is encrypted. May it be that pam-kwallet tries to communicate the password to kwallet _before_ the home directory is mounted, and therefore - fails?

I see there are people on other distributions testing the same hypothesis: https://www.redhat.com/archives/pam-list/2014-October/msg00000.html

By the way, even if I have the pam-kwallet working on the unencrypted home dir, I still have the "zombie" kwalletd process.

[mrl586 (mrl586)]

If you want get rid out that zombie process and you using vivid/wily, you can comment out that line from /etc/pam.d/sddm file

-auth optional pam_kwallet.so

[PJW (peter-isoc)]

I too noticed kwalletd being flagged as zombie in System Monitor.
However I do *not* have an encrypted home directory.
So this would contradict your hypothesis.

[Kevin Norman (kn100)]

I have installed 17.04 with full disk encryption as well as home directory encryption, and I am also affected. Issue occurs with LightDM as well as SDDM.