Comment 1 for bug 276384

Revision history for this message
Justin Dugger (jldugger) wrote : Re: Thingfinger dosen't unlock keyring

For reasons unknown to me, Network manager stores your wireless passwords in an encrypted keyring. Your password is the decrypt token. I assume you've enabled pam_keyring in common_auth, which recieves the password you type at GDM and starts the keyring manager with enough timeout to let nm-applet retrieve passwords from your keyring.

I'm marking this confirmed, to keep it a visible and known bug.

The fixes I can imagine are to either:
* place NM wireless keys out of the keyring by default (weak wireless security)
* store the keyring token within the fingerprint reader itself (good luck)
* store the keyring token on disk (bad security!)

Given the nature of the request and the very weak security of fingerprints, I think something closer to the first option is the desired solution here. I understand that Network Manager in Intrepid (http://www.ubuntu.com/testing/intrepid/alpha5#Network%20Manager%200.7) allows system wide settings.

Does this sound like an acceptable fix?