Bug#1142693: greetd: Regression: keyring is not automatically opened at login

[Chris Hofstaedtler]

Control: reassign -1 libpam-gnome-keyring
Control: retitle -1 libpam-gnome-keyring: install pam auth/session lines?

(CC'ing a few of the last uploaders specifically.)

On Tue, Aug 04, 2026 at 05:13:26PM +0200, Marco Mattiolo wrote:
> Hi,
> please, do not treat this as a GNOME-specific bug: as the original reporter
> pointed out, kwallet is affected as well.
> 
> FTR, greetd is the base of Mobian's login manager phrog, i.e. it can be used
> to launch GNOME- and KDE-based shells.
> 
> On the topic of the PAM config lines, I remember both auth/session lines
> always been required, see e.g. [1][2], so I don't get why now either should
> be dropped and the other left.

libpam-gnome-keyring currently installs a pam-auth-update config, 
but only does so for "password". [A]

People in this bug report suggest that also "auth" and "session" are 
necessary.

Please see to this bug report, to avoid degrading user experience, 
or settle this manner in some other way. As said above, having each 
login manager do something special does not scale.

Best,
Chris


[A] https://sources.debian.org/src/gnome-keyring/50.0-1/debian/pam-configs/gnome-keyring

> [1]
> https://wiki.archlinux.org/title/KDE_Wallet#Configure_PAM_on_Plasma_6_(KF6)
> [2] https://wiki.archlinux.org/title/GNOME/Keyring#PAM_step
> [3] https://invent.kde.org/plasma/kwallet-pam/-/blob/master/README.txt?ref_type=heads