Automatically unlock other keyring than “Login” on login (not auto-login)Chrome asks for password to unlock keyring on startupHow to disable the “unlock your keyring” popup?Lubuntu 14.04 - unlock keyring on loginUnlock keyring prompts three times instead of one timeIs it possible to activate the screensaver upon autologin, then unlock keyring on screensaver unlockWhere does Seahorse/GNOME keyring store its keyrings?ssh always prompts for key passwordSaving Keyring PasswordHow to stop the keyring dialoug when opening ChromeBroken configuration for seahorse-ssh-askpassGnome keyring daemon not starting up properlyHow to stop being asked to unlock “Default Keyring” on logging in?How to enter the password only once if /home is LUKS-encrypted?
Why is the sentence "Das ist eine Nase" correct?
Is it a bad idea to plug the other end of ESD strap to wall ground?
Can I hook these wires up to find the connection to a dead outlet?
Does Dispel Magic work on Tiny Hut?
Why were 5.25" floppy drives cheaper than 8"?
Different meanings of こわい
Avoiding the "not like other girls" trope?
Machine learning testing data
Is this draw by repetition?
Do Iron Man suits sport waste management systems?
My ex-girlfriend uses my Apple ID to login to her iPad, do I have to give her my Apple ID password to reset it?
Did 'Cinema Songs' exist during Hiranyakshipu's time?
Is there a hemisphere-neutral way of specifying a season?
How to travel to Japan while expressing milk?
Unlock My Phone! February 2018
In Bayesian inference, why are some terms dropped from the posterior predictive?
How to stretch the corners of this image so that it looks like a perfect rectangle?
Why didn't Boeing produce its own regional jet?
Why was the shrink from 8″ made only to 5.25″ and not smaller (4″ or less)
What is the most common color to indicate the input-field is disabled?
Why is it a bad idea to hire a hitman to eliminate most corrupt politicians?
Convert seconds to minutes
What does the same-ish mean?
Could the museum Saturn V's be refitted for one more flight?
Automatically unlock other keyring than “Login” on login (not auto-login)
Chrome asks for password to unlock keyring on startupHow to disable the “unlock your keyring” popup?Lubuntu 14.04 - unlock keyring on loginUnlock keyring prompts three times instead of one timeIs it possible to activate the screensaver upon autologin, then unlock keyring on screensaver unlockWhere does Seahorse/GNOME keyring store its keyrings?ssh always prompts for key passwordSaving Keyring PasswordHow to stop the keyring dialoug when opening ChromeBroken configuration for seahorse-ssh-askpassGnome keyring daemon not starting up properlyHow to stop being asked to unlock “Default Keyring” on logging in?How to enter the password only once if /home is LUKS-encrypted?
I have two keyrings: "Login" and "Default keyring".
"Login" contains only a few keys, including the unlock password for "Default keyring", and is unlocked automatically on login (which requires a password and is not set to auto-login)
"Default keyring" contains most of my keys. It is not unlocked automatically and needs to be unlocked manually in seahorse after every login. Obviously, unlocking it does not require any password, as the unlock password is automatically unlocked as part of the "Login" keyring.
Now I wonder how to setup an automatic unlock of the "Default Keyring".
Existing topics do not apply:
Lubuntu 14.04 - unlock keyring on login - libpam-gnome-keyring is installed
How to disable the "unlock your keyring" popup? - No “unlock your keyring” dialog pops up
Chrome asks for password to unlock keyring on startup - I don't want to save the keyring unencrypted
(My system specs: Ubuntu 15.10, GNOME Shell 3.18.2, Seahorse 3.16.0)
gnome login password 15.10 seahorse
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I have two keyrings: "Login" and "Default keyring".
"Login" contains only a few keys, including the unlock password for "Default keyring", and is unlocked automatically on login (which requires a password and is not set to auto-login)
"Default keyring" contains most of my keys. It is not unlocked automatically and needs to be unlocked manually in seahorse after every login. Obviously, unlocking it does not require any password, as the unlock password is automatically unlocked as part of the "Login" keyring.
Now I wonder how to setup an automatic unlock of the "Default Keyring".
Existing topics do not apply:
Lubuntu 14.04 - unlock keyring on login - libpam-gnome-keyring is installed
How to disable the "unlock your keyring" popup? - No “unlock your keyring” dialog pops up
Chrome asks for password to unlock keyring on startup - I don't want to save the keyring unencrypted
(My system specs: Ubuntu 15.10, GNOME Shell 3.18.2, Seahorse 3.16.0)
gnome login password 15.10 seahorse
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
I have two keyrings: "Login" and "Default keyring".
"Login" contains only a few keys, including the unlock password for "Default keyring", and is unlocked automatically on login (which requires a password and is not set to auto-login)
"Default keyring" contains most of my keys. It is not unlocked automatically and needs to be unlocked manually in seahorse after every login. Obviously, unlocking it does not require any password, as the unlock password is automatically unlocked as part of the "Login" keyring.
Now I wonder how to setup an automatic unlock of the "Default Keyring".
Existing topics do not apply:
Lubuntu 14.04 - unlock keyring on login - libpam-gnome-keyring is installed
How to disable the "unlock your keyring" popup? - No “unlock your keyring” dialog pops up
Chrome asks for password to unlock keyring on startup - I don't want to save the keyring unencrypted
(My system specs: Ubuntu 15.10, GNOME Shell 3.18.2, Seahorse 3.16.0)
gnome login password 15.10 seahorse
I have two keyrings: "Login" and "Default keyring".
"Login" contains only a few keys, including the unlock password for "Default keyring", and is unlocked automatically on login (which requires a password and is not set to auto-login)
"Default keyring" contains most of my keys. It is not unlocked automatically and needs to be unlocked manually in seahorse after every login. Obviously, unlocking it does not require any password, as the unlock password is automatically unlocked as part of the "Login" keyring.
Now I wonder how to setup an automatic unlock of the "Default Keyring".
Existing topics do not apply:
Lubuntu 14.04 - unlock keyring on login - libpam-gnome-keyring is installed
How to disable the "unlock your keyring" popup? - No “unlock your keyring” dialog pops up
Chrome asks for password to unlock keyring on startup - I don't want to save the keyring unencrypted
(My system specs: Ubuntu 15.10, GNOME Shell 3.18.2, Seahorse 3.16.0)
gnome login password 15.10 seahorse
gnome login password 15.10 seahorse
edited Apr 13 '17 at 12:23
Community♦
1
1
asked Feb 7 '16 at 14:16
fretfret
7772713
7772713
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
bumped to the homepage by Community♦ 2 hours ago
This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
I did not find a solution for automatically unlocking a keyring other than the "Login"-keyring.
A workaround I came up with requires setting the passwords of both keyrings to blank temporarily, thus having plain-text-access to both files in .local/share/keyrings/ (make sure to make backups).
I manually merged both files into the "Login"-keyring with a text editor, making sure that there are no entries with the same identifier. Then I deleted the "Default keyring"-keyring and finally set the password of the "Login"-keyring back to my login password.
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
add a comment |
cat ~/.gnome/apps/chrome-*
cat ~/.local/share/applications/chrome-*
For Chrome. Disable the unlock your keyring popup: enter password to unlock your login keyring
rm ~/.gnome/apps/chrome-*
rm ~/.local/share/applications/chrome-*
Edit.
I was confused because I did not understand the problem.
Now I will explain my error and my particular solution.
The files .desktop are the beginning to see what happens.
cat /usr/share/autostart/gnome-* | grep Exec
Exec=/usr/bin/gnome-keyring-daemon --start --components=gpg
Exec=/usr/bin/gnome-keyring-daemon --start --components=pkcs11
Exec=/usr/bin/gnome-keyring-daemon --start --components=secrets
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
https://wiki.gnome.org/Projects/GnomeKeyring/
Automatic Unlocking
GNOME Keyring supports automatically unlocking keyrings when the user logs into the machine.
https://wiki.gnome.org/Projects/GnomeKeyring/Pam
Configuring Gnome Keyring's PAM Support
This is usually installed by default by a distro or OS distributor.
To check if your distro or OS has support for this:
grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
To see if a 'login' keyring exists (it's created automatically):
test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
test -f ~/.local/share/keyrings/login.keyring && echo "Have 'login' keyring"
See pam.d:
ls /etc/pam.d/lightdm*
cat /etc/pam.d/lightdm*
https: //wiki.archlinux.org/index.php/GNOME/Keyring
When using GNOME, gnome-keyring is installed automatically as a part of the gnome group.
You can manage the contents of GNOME Keyring using Seahorse. Install it with the package seahorse.
This was my mistake. I was wrong and I put the first solution, believing it worked. But it did not work because what happened was that the keyrings were unlocked and when you open google-chrome with the unlocked the keyrings does not prompt you for the password.
https: //bugs.chromium.org/p/chromium/issues/detail?id=72499
If I unlock the keyrings before I start chrome, then things seem to be okay.
However, if I close chrome and re-lock the keyrings, I'm still back in a bad state.
google-chrome
** Message: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection
http: //unix.stackexchange.com/questions/100657/what-is-keyring-in-google-chrome
Generally, a keyring is a secure password store, that is encrypted with a master password.
Once you input the master password, the keyring gets decrypted and all the passwords inside it are available to the application accessing the keyring.
On Gnome/Ubuntu the seahorse application can be used to look at the keyring and the master password is the same with your user's password so you don't get asked about it anymore.
Most likely your system's keyring password doesn't match your user's password, or the integration is somehow broken.
You can try to cancel it and see if you still have access to your saved website passwords. Most likely you will be asked for the master password again, as soon as you attempt to use a saved password.
My solution for now (I use https: //www.passwordstore.org):
google-chrome --password-store=basic
Other info
cat /var/log/auth.log
Dec 25 10:06:30 wicope gnome-keyring-daemon[2415]: keyring alias directory: /home/usuario/.local/share/keyrings
ls -la ~/.local/share/keyrings/
-rw------- 1 usuario usuario 15928 dic 25 12:04 login.keyring
-rw------- 1 usuario usuario 207 ene 21 2016 user.keystore
Without testing
https: //bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1433032
http: //askubuntu.com/questions/449568/broken-gnome-keyring-file-and-google-chrome-hangs
Ugly fix: remove gnome-keyring execute privilege.
chmod -x /usr/bin/gnome-keyring-daemon
After this, gnome-keyring-daemon will not make any Chrome issue anymore, but it will not save any system password (google chrome password will be saved and you can used saved one too).
PD: http: //... I need al least 10 reputation to post more than 2 links.
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "89"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f730852%2fautomatically-unlock-other-keyring-than-login-on-login-not-auto-login%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
I did not find a solution for automatically unlocking a keyring other than the "Login"-keyring.
A workaround I came up with requires setting the passwords of both keyrings to blank temporarily, thus having plain-text-access to both files in .local/share/keyrings/ (make sure to make backups).
I manually merged both files into the "Login"-keyring with a text editor, making sure that there are no entries with the same identifier. Then I deleted the "Default keyring"-keyring and finally set the password of the "Login"-keyring back to my login password.
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
add a comment |
I did not find a solution for automatically unlocking a keyring other than the "Login"-keyring.
A workaround I came up with requires setting the passwords of both keyrings to blank temporarily, thus having plain-text-access to both files in .local/share/keyrings/ (make sure to make backups).
I manually merged both files into the "Login"-keyring with a text editor, making sure that there are no entries with the same identifier. Then I deleted the "Default keyring"-keyring and finally set the password of the "Login"-keyring back to my login password.
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
add a comment |
I did not find a solution for automatically unlocking a keyring other than the "Login"-keyring.
A workaround I came up with requires setting the passwords of both keyrings to blank temporarily, thus having plain-text-access to both files in .local/share/keyrings/ (make sure to make backups).
I manually merged both files into the "Login"-keyring with a text editor, making sure that there are no entries with the same identifier. Then I deleted the "Default keyring"-keyring and finally set the password of the "Login"-keyring back to my login password.
I did not find a solution for automatically unlocking a keyring other than the "Login"-keyring.
A workaround I came up with requires setting the passwords of both keyrings to blank temporarily, thus having plain-text-access to both files in .local/share/keyrings/ (make sure to make backups).
I manually merged both files into the "Login"-keyring with a text editor, making sure that there are no entries with the same identifier. Then I deleted the "Default keyring"-keyring and finally set the password of the "Login"-keyring back to my login password.
answered Feb 7 '16 at 14:16
fretfret
7772713
7772713
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
add a comment |
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
AFAIK, there is no other way to enable automatic unlocking. The workaround of setting blank passwords is the only way to unlock them without having to do it manually. You will get a warning about it not being recommended. Blank keyring passwords can be a security risk so the user will have to decide if the annoyance is greater than the potential risk.
– TrailRider
Feb 7 '16 at 16:00
add a comment |
cat ~/.gnome/apps/chrome-*
cat ~/.local/share/applications/chrome-*
For Chrome. Disable the unlock your keyring popup: enter password to unlock your login keyring
rm ~/.gnome/apps/chrome-*
rm ~/.local/share/applications/chrome-*
Edit.
I was confused because I did not understand the problem.
Now I will explain my error and my particular solution.
The files .desktop are the beginning to see what happens.
cat /usr/share/autostart/gnome-* | grep Exec
Exec=/usr/bin/gnome-keyring-daemon --start --components=gpg
Exec=/usr/bin/gnome-keyring-daemon --start --components=pkcs11
Exec=/usr/bin/gnome-keyring-daemon --start --components=secrets
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
https://wiki.gnome.org/Projects/GnomeKeyring/
Automatic Unlocking
GNOME Keyring supports automatically unlocking keyrings when the user logs into the machine.
https://wiki.gnome.org/Projects/GnomeKeyring/Pam
Configuring Gnome Keyring's PAM Support
This is usually installed by default by a distro or OS distributor.
To check if your distro or OS has support for this:
grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
To see if a 'login' keyring exists (it's created automatically):
test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
test -f ~/.local/share/keyrings/login.keyring && echo "Have 'login' keyring"
See pam.d:
ls /etc/pam.d/lightdm*
cat /etc/pam.d/lightdm*
https: //wiki.archlinux.org/index.php/GNOME/Keyring
When using GNOME, gnome-keyring is installed automatically as a part of the gnome group.
You can manage the contents of GNOME Keyring using Seahorse. Install it with the package seahorse.
This was my mistake. I was wrong and I put the first solution, believing it worked. But it did not work because what happened was that the keyrings were unlocked and when you open google-chrome with the unlocked the keyrings does not prompt you for the password.
https: //bugs.chromium.org/p/chromium/issues/detail?id=72499
If I unlock the keyrings before I start chrome, then things seem to be okay.
However, if I close chrome and re-lock the keyrings, I'm still back in a bad state.
google-chrome
** Message: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection
http: //unix.stackexchange.com/questions/100657/what-is-keyring-in-google-chrome
Generally, a keyring is a secure password store, that is encrypted with a master password.
Once you input the master password, the keyring gets decrypted and all the passwords inside it are available to the application accessing the keyring.
On Gnome/Ubuntu the seahorse application can be used to look at the keyring and the master password is the same with your user's password so you don't get asked about it anymore.
Most likely your system's keyring password doesn't match your user's password, or the integration is somehow broken.
You can try to cancel it and see if you still have access to your saved website passwords. Most likely you will be asked for the master password again, as soon as you attempt to use a saved password.
My solution for now (I use https: //www.passwordstore.org):
google-chrome --password-store=basic
Other info
cat /var/log/auth.log
Dec 25 10:06:30 wicope gnome-keyring-daemon[2415]: keyring alias directory: /home/usuario/.local/share/keyrings
ls -la ~/.local/share/keyrings/
-rw------- 1 usuario usuario 15928 dic 25 12:04 login.keyring
-rw------- 1 usuario usuario 207 ene 21 2016 user.keystore
Without testing
https: //bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1433032
http: //askubuntu.com/questions/449568/broken-gnome-keyring-file-and-google-chrome-hangs
Ugly fix: remove gnome-keyring execute privilege.
chmod -x /usr/bin/gnome-keyring-daemon
After this, gnome-keyring-daemon will not make any Chrome issue anymore, but it will not save any system password (google chrome password will be saved and you can used saved one too).
PD: http: //... I need al least 10 reputation to post more than 2 links.
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
add a comment |
cat ~/.gnome/apps/chrome-*
cat ~/.local/share/applications/chrome-*
For Chrome. Disable the unlock your keyring popup: enter password to unlock your login keyring
rm ~/.gnome/apps/chrome-*
rm ~/.local/share/applications/chrome-*
Edit.
I was confused because I did not understand the problem.
Now I will explain my error and my particular solution.
The files .desktop are the beginning to see what happens.
cat /usr/share/autostart/gnome-* | grep Exec
Exec=/usr/bin/gnome-keyring-daemon --start --components=gpg
Exec=/usr/bin/gnome-keyring-daemon --start --components=pkcs11
Exec=/usr/bin/gnome-keyring-daemon --start --components=secrets
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
https://wiki.gnome.org/Projects/GnomeKeyring/
Automatic Unlocking
GNOME Keyring supports automatically unlocking keyrings when the user logs into the machine.
https://wiki.gnome.org/Projects/GnomeKeyring/Pam
Configuring Gnome Keyring's PAM Support
This is usually installed by default by a distro or OS distributor.
To check if your distro or OS has support for this:
grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
To see if a 'login' keyring exists (it's created automatically):
test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
test -f ~/.local/share/keyrings/login.keyring && echo "Have 'login' keyring"
See pam.d:
ls /etc/pam.d/lightdm*
cat /etc/pam.d/lightdm*
https: //wiki.archlinux.org/index.php/GNOME/Keyring
When using GNOME, gnome-keyring is installed automatically as a part of the gnome group.
You can manage the contents of GNOME Keyring using Seahorse. Install it with the package seahorse.
This was my mistake. I was wrong and I put the first solution, believing it worked. But it did not work because what happened was that the keyrings were unlocked and when you open google-chrome with the unlocked the keyrings does not prompt you for the password.
https: //bugs.chromium.org/p/chromium/issues/detail?id=72499
If I unlock the keyrings before I start chrome, then things seem to be okay.
However, if I close chrome and re-lock the keyrings, I'm still back in a bad state.
google-chrome
** Message: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection
http: //unix.stackexchange.com/questions/100657/what-is-keyring-in-google-chrome
Generally, a keyring is a secure password store, that is encrypted with a master password.
Once you input the master password, the keyring gets decrypted and all the passwords inside it are available to the application accessing the keyring.
On Gnome/Ubuntu the seahorse application can be used to look at the keyring and the master password is the same with your user's password so you don't get asked about it anymore.
Most likely your system's keyring password doesn't match your user's password, or the integration is somehow broken.
You can try to cancel it and see if you still have access to your saved website passwords. Most likely you will be asked for the master password again, as soon as you attempt to use a saved password.
My solution for now (I use https: //www.passwordstore.org):
google-chrome --password-store=basic
Other info
cat /var/log/auth.log
Dec 25 10:06:30 wicope gnome-keyring-daemon[2415]: keyring alias directory: /home/usuario/.local/share/keyrings
ls -la ~/.local/share/keyrings/
-rw------- 1 usuario usuario 15928 dic 25 12:04 login.keyring
-rw------- 1 usuario usuario 207 ene 21 2016 user.keystore
Without testing
https: //bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1433032
http: //askubuntu.com/questions/449568/broken-gnome-keyring-file-and-google-chrome-hangs
Ugly fix: remove gnome-keyring execute privilege.
chmod -x /usr/bin/gnome-keyring-daemon
After this, gnome-keyring-daemon will not make any Chrome issue anymore, but it will not save any system password (google chrome password will be saved and you can used saved one too).
PD: http: //... I need al least 10 reputation to post more than 2 links.
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
add a comment |
cat ~/.gnome/apps/chrome-*
cat ~/.local/share/applications/chrome-*
For Chrome. Disable the unlock your keyring popup: enter password to unlock your login keyring
rm ~/.gnome/apps/chrome-*
rm ~/.local/share/applications/chrome-*
Edit.
I was confused because I did not understand the problem.
Now I will explain my error and my particular solution.
The files .desktop are the beginning to see what happens.
cat /usr/share/autostart/gnome-* | grep Exec
Exec=/usr/bin/gnome-keyring-daemon --start --components=gpg
Exec=/usr/bin/gnome-keyring-daemon --start --components=pkcs11
Exec=/usr/bin/gnome-keyring-daemon --start --components=secrets
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
https://wiki.gnome.org/Projects/GnomeKeyring/
Automatic Unlocking
GNOME Keyring supports automatically unlocking keyrings when the user logs into the machine.
https://wiki.gnome.org/Projects/GnomeKeyring/Pam
Configuring Gnome Keyring's PAM Support
This is usually installed by default by a distro or OS distributor.
To check if your distro or OS has support for this:
grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
To see if a 'login' keyring exists (it's created automatically):
test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
test -f ~/.local/share/keyrings/login.keyring && echo "Have 'login' keyring"
See pam.d:
ls /etc/pam.d/lightdm*
cat /etc/pam.d/lightdm*
https: //wiki.archlinux.org/index.php/GNOME/Keyring
When using GNOME, gnome-keyring is installed automatically as a part of the gnome group.
You can manage the contents of GNOME Keyring using Seahorse. Install it with the package seahorse.
This was my mistake. I was wrong and I put the first solution, believing it worked. But it did not work because what happened was that the keyrings were unlocked and when you open google-chrome with the unlocked the keyrings does not prompt you for the password.
https: //bugs.chromium.org/p/chromium/issues/detail?id=72499
If I unlock the keyrings before I start chrome, then things seem to be okay.
However, if I close chrome and re-lock the keyrings, I'm still back in a bad state.
google-chrome
** Message: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection
http: //unix.stackexchange.com/questions/100657/what-is-keyring-in-google-chrome
Generally, a keyring is a secure password store, that is encrypted with a master password.
Once you input the master password, the keyring gets decrypted and all the passwords inside it are available to the application accessing the keyring.
On Gnome/Ubuntu the seahorse application can be used to look at the keyring and the master password is the same with your user's password so you don't get asked about it anymore.
Most likely your system's keyring password doesn't match your user's password, or the integration is somehow broken.
You can try to cancel it and see if you still have access to your saved website passwords. Most likely you will be asked for the master password again, as soon as you attempt to use a saved password.
My solution for now (I use https: //www.passwordstore.org):
google-chrome --password-store=basic
Other info
cat /var/log/auth.log
Dec 25 10:06:30 wicope gnome-keyring-daemon[2415]: keyring alias directory: /home/usuario/.local/share/keyrings
ls -la ~/.local/share/keyrings/
-rw------- 1 usuario usuario 15928 dic 25 12:04 login.keyring
-rw------- 1 usuario usuario 207 ene 21 2016 user.keystore
Without testing
https: //bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1433032
http: //askubuntu.com/questions/449568/broken-gnome-keyring-file-and-google-chrome-hangs
Ugly fix: remove gnome-keyring execute privilege.
chmod -x /usr/bin/gnome-keyring-daemon
After this, gnome-keyring-daemon will not make any Chrome issue anymore, but it will not save any system password (google chrome password will be saved and you can used saved one too).
PD: http: //... I need al least 10 reputation to post more than 2 links.
cat ~/.gnome/apps/chrome-*
cat ~/.local/share/applications/chrome-*
For Chrome. Disable the unlock your keyring popup: enter password to unlock your login keyring
rm ~/.gnome/apps/chrome-*
rm ~/.local/share/applications/chrome-*
Edit.
I was confused because I did not understand the problem.
Now I will explain my error and my particular solution.
The files .desktop are the beginning to see what happens.
cat /usr/share/autostart/gnome-* | grep Exec
Exec=/usr/bin/gnome-keyring-daemon --start --components=gpg
Exec=/usr/bin/gnome-keyring-daemon --start --components=pkcs11
Exec=/usr/bin/gnome-keyring-daemon --start --components=secrets
Exec=/usr/bin/gnome-keyring-daemon --start --components=ssh
https://wiki.gnome.org/Projects/GnomeKeyring/
Automatic Unlocking
GNOME Keyring supports automatically unlocking keyrings when the user logs into the machine.
https://wiki.gnome.org/Projects/GnomeKeyring/Pam
Configuring Gnome Keyring's PAM Support
This is usually installed by default by a distro or OS distributor.
To check if your distro or OS has support for this:
grep -rq pam_gnome_keyring.so /etc/pam.* && echo "Have PAM Support"
To see if a 'login' keyring exists (it's created automatically):
test -f ~/.gnome2/keyrings/login.keyring && echo "Have 'login' keyring"
test -f ~/.local/share/keyrings/login.keyring && echo "Have 'login' keyring"
See pam.d:
ls /etc/pam.d/lightdm*
cat /etc/pam.d/lightdm*
https: //wiki.archlinux.org/index.php/GNOME/Keyring
When using GNOME, gnome-keyring is installed automatically as a part of the gnome group.
You can manage the contents of GNOME Keyring using Seahorse. Install it with the package seahorse.
This was my mistake. I was wrong and I put the first solution, believing it worked. But it did not work because what happened was that the keyrings were unlocked and when you open google-chrome with the unlocked the keyrings does not prompt you for the password.
https: //bugs.chromium.org/p/chromium/issues/detail?id=72499
If I unlock the keyrings before I start chrome, then things seem to be okay.
However, if I close chrome and re-lock the keyrings, I'm still back in a bad state.
google-chrome
** Message: Remote error from secret service: org.freedesktop.Secret.Error.IsLocked: Cannot create an item in a locked collection
http: //unix.stackexchange.com/questions/100657/what-is-keyring-in-google-chrome
Generally, a keyring is a secure password store, that is encrypted with a master password.
Once you input the master password, the keyring gets decrypted and all the passwords inside it are available to the application accessing the keyring.
On Gnome/Ubuntu the seahorse application can be used to look at the keyring and the master password is the same with your user's password so you don't get asked about it anymore.
Most likely your system's keyring password doesn't match your user's password, or the integration is somehow broken.
You can try to cancel it and see if you still have access to your saved website passwords. Most likely you will be asked for the master password again, as soon as you attempt to use a saved password.
My solution for now (I use https: //www.passwordstore.org):
google-chrome --password-store=basic
Other info
cat /var/log/auth.log
Dec 25 10:06:30 wicope gnome-keyring-daemon[2415]: keyring alias directory: /home/usuario/.local/share/keyrings
ls -la ~/.local/share/keyrings/
-rw------- 1 usuario usuario 15928 dic 25 12:04 login.keyring
-rw------- 1 usuario usuario 207 ene 21 2016 user.keystore
Without testing
https: //bugs.launchpad.net/ubuntu/+source/gnome-keyring/+bug/1433032
http: //askubuntu.com/questions/449568/broken-gnome-keyring-file-and-google-chrome-hangs
Ugly fix: remove gnome-keyring execute privilege.
chmod -x /usr/bin/gnome-keyring-daemon
After this, gnome-keyring-daemon will not make any Chrome issue anymore, but it will not save any system password (google chrome password will be saved and you can used saved one too).
PD: http: //... I need al least 10 reputation to post more than 2 links.
edited Dec 25 '16 at 13:29
answered Dec 24 '16 at 8:27
wicopewicope
111
111
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
add a comment |
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
3
3
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
I'm not sure what these commands are supposed to achieve. Could you please clarify? It looks like they just list the content of some of Chrome's desktop launchers and then remove them.
– David Foerster
Dec 24 '16 at 15:35
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f730852%2fautomatically-unlock-other-keyring-than-login-on-login-not-auto-login%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown