GNOME Bugzilla – Bug 769950
Support getting automatic login password from LUKS
Last modified: 2016-09-09 00:46:39 UTC
On single user systems, the LUKS password and the login password are often the same. systemd helpfully puts the LUKS password into the kernel keyring for the first few minutes following boot. We can extract that password and use it for automatic login situations. This first draft does the bare minimum to make that happen.
Created attachment 333377 [details] [review] pam_gdm: add stub pam module It doesn't do anything yet, but it will eventually get used for autologin purposes, and maybe other things.
Created attachment 333378 [details] [review] pam: grab cached password from systemd and pass it on If the user has an encrypted disk then systemd will cache the password they type into the keyring. It makes sense to try to use this password for automatic login purposes first, since on single user machines, the sole user password is likely to match the disk password. Of course if it doesn't work we'll fall back to the old way of doing automatic login without a password (and then the user will have to manualy enter if they need to for gnome-keyring or whatever)
The following fixes have been pushed: 31ed6f2 pam: grab cached password from systemd and pass it on 714b6af pam_gdm: add stub pam module
Created attachment 333690 [details] [review] pam: grab cached password from systemd and pass it on If the user has an encrypted disk then systemd will cache the password they type into the keyring. It makes sense to try to use this password for automatic login purposes first, since on single user machines, the sole user password is likely to match the disk password. Of course if it doesn't work we'll fall back to the old way of doing automatic login without a password (and then the user will have to manualy enter if they need to for gnome-keyring or whatever)
Created attachment 333691 [details] [review] pam_gdm: add stub pam module It doesn't do anything yet, but it will eventually get used for autologin purposes, and maybe other things.
note these changes caused problems, see bug 770612
I didn't realize this happened. Did you propose it for the release notes? We should advertise this!