[pkg-gnupg-maint] Bug#801247: followup on pinentry-gnome3 and dbus [was: Grave bug]

[Daniel Kahn Gillmor]

Control: severity 801247 important
Control: forcemerge 801247 795368

Hi Bastian--

On Fri 2016-03-11 10:49:52 -0500, Bastien ROUCARIES wrote:
> Package: pinentry-gnome3
> Version: 0.9.7-5
> control: severity -1 grave
> justification: package is unusable
>
> This bug break my ssh authentification scheme.

This definitely sounds frustrating, hopefully we can get this sorted
out.  you don't describe your ssh authentication scheme in much detail
here, so i don't know how to help you diagnose it better.

> pinentry-gnome3 is unusable thus according to policy this is grave
> bug, and should avoid pinentry-gnome3 to go to stable.

Many people have been using pinentry-gnome3 without a problem, so it's
clearly not absolutely unusable.  I'm moving this bug report to
"important" to reflect this.

> It seems this a duplicated of 795368

Thanks for the suggestion, i think you're right, and i'm merging the
bugs here.

Tim Small wrote:

> I suppose the fix would involve either pinentry-gnome3 getting the
> dbus session from the X session in some way (if that's possible),
> or extending the functionality of "updatestartuptty" to also update dbus
> session used by gpg-agent when starting the pinentry command.

This is already happening, fwiw.  updatestartuptty sends all of the
relevant bits of the environment that might be needed by pinentry,
including GTK_IM_MODULE and DBUS_SESSION_BUS_ADDRESS.

I'll have pinentry-gnome3 Recommend: dbus-user-session in the next
release to encourage people to use a single D-bus session for any given
authenticated user.

          --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 930 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20161011/1cf9a6e3/attachment-0001.sig>