After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 603626 - nm-applet looses right to access keyring after long hibernation and has no way to restore access
nm-applet looses right to access keyring after long hibernation and has no wa...
Status: RESOLVED OBSOLETE
Product: NetworkManager
Classification: Platform
Component: nm-applet
git master
Other Linux
: Normal normal
: ---
Assigned To: Dan Williams
NetworkManager maintainer(s)
Depends on:
Blocks:
 
 
Reported: 2009-12-02 17:45 UTC by Teej
Modified: 2014-01-02 17:07 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Teej 2009-12-02 17:45:09 UTC
This bug was reported at and being tracked in Launchpad at https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/158017

"After a long hibernation cycle (one night) nm-applet is not granted access to the proper gnome-keyring anymore. By itself it is not wise enough to try to unlock the keyring again, ergo ask for the passphrase again. This does not happen when I hibernate only for a short time (5 minutes).

Specifying the WEP/WPA passphrase by hand does not work either, because nm-applet tries to save the phrase before it attempts to connect to the network. Failure in saving automatically results in failure to connect. This is a misconception as well I think! If I know the passphrase I should be able to connect, no matter what!

However, I can solve the problem with killing and restarting nm-applet. It then asks for the passphrase again. (I restarted the keyring-daemon as well, don't know if that was really necessary)."

----------------------

Additional information:

"Both /etc/pam.d/gdm and /etc/pam.d/gnome-screensaver contain:
auth optional pam_gnome_keyring.so
However, only the former contains:
session optional pam_gnome_keyring.so auto_start
That's how it should be according to the documentation:
http://live.gnome.org/GnomeKeyring/Pam
Is gnome-keyring-daemon supposed to be killed on hibernate? If that's the case, then it should be sufficient to append auto_start to the end of the auth line in /etc/pam.d/gnome-screensaver, since that pam module checks if the keyring daemon is already running and doesn't start it again if it is.

After a little investigation, it seems gnome-keyring-d _isn't_ dying on hibernate, at least not always. So either it's dying sporadically for some reason, or there's some other reason why that line in gnome-screensaver's PAM config (which should unlock the default keyring) doesn't prevent network-manager from thinking the keyring is still locked."
Comment 1 Dan Winship 2014-01-02 17:07:24 UTC
NM no longer uses gnome-keyring. If the bug still exists with libsecret someone should file a new bug