[Pkg-xfce-devel] Bug#683508: lightdm: Error messages about gnome keyring in auth.log

[Patrick Häcker]

> I do not have gnome-keyring-daemon installed.  Why is it trying to
> start it?
You are correct that in an ideal solution this line should only be present if 
gnome-keyring-daemon is installed. However, the rest of the configuration 
should be in the responsibility of the lightdm package (or other packages with 
the same problem as gnome-keyring-daemon). Modifying configuration files from 
other packages is always fragile, so this is probably no improvement. The 
cleanest solution would be to have a directory structure as in the other 
/etc/*.d directories. But this might be overkill to have that for nearly every 
entry in /etc/pam.d (and I do not know if there is a problem nesting two .d-
directories).

> Would it be possible to change /etc/pam.d/lightdm in a way that no
> error/warning appears if the module is not installed?
Besides the error, having an additional line in the lightdm configuration does 
not seem to do much harm. So it would be enough to avoid this error. This is 
indeed easily possible by adding a leading minus sign to the entries (the 
"optional" keyword is, unfortunately, not enough).

So change the lines
> auth optional pam_gnome_keyring.so
> session optional pam_gnome_keyring.so auto_start
into
> -auth optional pam_gnome_keyring.so
> -session optional pam_gnome_keyring.so auto_start
in file /etc/pam.d/lightdm to tell PAM to ignore pam_gnome_keyring.so if it is 
missing.

I didn't create a patch file, as the fix is straightforward, although I can do 
that if necessary.

Kind regards
Patrick
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-xfce-devel/attachments/20140928/ed81b8f3/attachment.sig>