[Thinlinc-technical] thinlinc with gnome-keyring

[Pierre Ossman]

On Mon, 1 Feb 2016 11:52:05 -0800
Justin Garrison <justinleegarrison at gmail.com> wrote:

> I'm using thinlinc on CentOS/Redhat 7 hosts. The problem is after
> login via thinlinc I am prompted for my keyring password because the
> login password was not properly passed to pam_gnome_keyring to unlock
> it automatically. This problem doesn't happen from gdm or lightdm on
> the local machine and they gnome-keyring-daemon is already
> authenticated after login.
> 
> I tried adding the necessary lines to /etc/pam.d/thinlinc
> 
> auth       optional    pam_gnome_keyring.so
> and
> session    optional    pam_gnome_keyring.so auto_start
> 

This won't work for the simple reason that authentication and session
startup is split up in ThinLinc. You are authenticating with the master
machine, and the session is started on an agent (which might be a
completely different machine).

What would be needed is integrating the keyring with ThinLinc single
sign-on. Ideally they'd have some command line tool to unlock the
keyring which we could use with tl-sso-password. Unfortunately I cannot
seem to find any such tool. :/

Rgds
-- 
Pierre Ossman           Software Development
Cendio AB		https://cendio.com
Teknikringen 8		https://twitter.com/ThinLinc
583 30 Linköping	https://facebook.com/ThinLinc
Phone: +46-13-214600	https://plus.google.com/+CendioThinLinc

A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?