PAM stopped unlocking kwallet while logging in through SDDM

[sibok]

Hi,

suddenly kwallet stopped unlocking automatically while logging into KDE plasma through SDDM. I'm trying to debug but don't know what's going on.

The following is my PAM config, does anyone knows what could i be missing or what has changed?

Thanks in advanced.

[I] kde-frameworks/kwallet [1]
     Available versions:  (5) 5.57.0(5/5.57) (~)5.59.0(5/5.59)
       {debug doc gpg +man test}
     Installed versions:  5.59.0(5/5.59)(02:38:01 PM 10/02/2019)(man -debug -doc -gpg -test)
     Homepage:            https://kde.org/
     Description:         Framework providing desktop-wide storage for passwords
 
[I] kde-plasma/kwallet-pam [1]
     Available versions:  (5) 5.15.5 (~)5.16.1
       {debug}
     Installed versions:  5.16.1(5)(10:29:25 AM 09/13/2020)(-debug)
     Homepage:            https://kde.org/
     Description:         KWallet PAM module to not enter password again

egrep -Ri kwall /etc/pam.d/
/etc/pam.d/login:-session    optional     pam_kwallet5.so auto_start
/etc/pam.d/sddm-autologin:-auth       optional    pam_kwallet5.so
/etc/pam.d/sddm-autologin:-session    optional    pam_kwallet5.so auto_start
/etc/pam.d/sddm:-auth           optional        pam_kwallet5.so
/etc/pam.d/sddm:-session        optional        pam_kwallet5.so auto_start
/etc/pam.d/passwd:-auth           optional        pam_kwallet5.so

 
/etc/pam.d/login                                                                                  
  auth       include      system-local-login
  account    include      system-local-login
  password   include      system-local-login
  session    optional     pam_lastlog.so
  session    include      system-local-login
  -session    optional     pam_kwallet5.so auto_start
 

/etc/pam.d/sddm-autologin                                                                             
  #%PAM-1.0
  auth        required    pam_env.so
  auth        required    pam_tally.so file=/var/log/faillog onerr=succeed
  auth        required    pam_shells.so
  auth        required    pam_nologin.so
  auth        required    pam_permit.so
  #-auth       optional    pam_gnome_keyring.so
  -auth       optional    pam_kwallet5.so
  account     include     system-local-login
 password    include     system-local-login
 session     include     system-local-login
 #-session    optional    pam_gnome_keyring.so auto_start
 -session    optional    pam_kwallet5.so auto_start

 

/etc/pam.d/sddm                                                                                  
  #%PAM-1.0
 
  auth            include         system-login
  #-auth          optional        pam_gnome_keyring.so
  # the hyphens are valid PAM syntax to reduce log entries if these PAM modules should not exist
  -auth           optional        pam_kwallet5.so
 
  account         include         system-login
 
 password        include         system-login
 #-password      optional        pam_gnome_keyring.so use_authtok
 
 session         optional        pam_keyinit.so force revoke
 session         include         system-login
 #-session       optional        pam_gnome_keyring.so auto_start
 # the hyphens are valid PAM syntax to reduce log entries if these PAM modules should not exist
 -session        optional        pam_kwallet5.so auto_start

 
/etc/pam.d/passwd                                                                                 
  auth            sufficient      pam_rootok.so
  auth            include         system-auth
  -auth           optional        pam_kwallet5.so
  account         include         system-auth
  password        include         system-auth
  #-password      optional        pam_gnome_keyring.so use_authtok

Edited September 13, 2020 by sibok

[cardinal]

Search /var/log/messages and /var/log/sddm.log for error messages related to your problem.

Reference:

https://bugs.gentoo.org/728550  - sys-libs/pam-1.4.0-r1 breaks kde-plasma/kwallet-pam-5.19.1 auto unlock of wallet during login problem starts with the newer version of pam that is not in funtoo's portage yet.

 

 

Edited September 17, 2020 by cardinal