sddm + pam_kwallet5 + pam_usb =“没有kwallet5_key调用的open_session”

Question

随着pam_usb的建立和运行，当我在SDDM中输入密码时，当usb被连接时，在等离子启动后，我发现k钱包没有被解锁。当我登录后插入usb键时，不会发生这种情况。当问题出现时，我可以在日志中看到受约束的消息：

18 00:05:01 rocket sddm-helper[3172]: pam_kwallet(sddm:session): (null): pam_sm_open_session
18 00:05:01 rocket sddm-helper[3172]: pam_kwallet(sddm:session): pam_kwallet: open_session called without kwallet_key
18 00:05:01 rocket sddm-helper[3172]: pam_kwallet5(sddm:session): (null): pam_sm_open_session
18 00:05:01 rocket sddm-helper[3172]: pam_kwallet5(sddm:session): pam_kwallet5: open_session called without kwallet5_key

以下是相关的pam文件：

cat /etc/pam.d/common-auth|grep -v "^#"

auth    sufficient      pam_usb.so
auth    [success=1 default=ignore]      pam_unix.so nullok_secure try_first_pass
auth    requisite                       pam_deny.so
auth    required                        pam_permit.so

cat /etc/pam.d/sddm|grep -v "^#"

auth    requisite       pam_nologin.so
auth    required        pam_succeed_if.so user != root quiet_success

@include common-auth
-auth   optional        pam_gnome_keyring.so
-auth   optional        pam_kwallet.so
-auth   optional        pam_kwallet5.so

@include common-account

session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session optional        pam_keyinit.so force revoke
session required        pam_limits.so
session required        pam_loginuid.so
session required        pam_systemd.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
-session optional       pam_gnome_keyring.so auto_start
-session optional       pam_kwallet.so auto_start
-session optional       pam_kwallet5.so auto_start

@include common-password


session required        pam_env.so

session required        pam_env.so envfile=/etc/default/locale

我如何将pam_usb和pam_kwallet(5)配置为一起生活？

Answer 1

我找不到比这更好的了

cat /etc/pam.d/common-auth

auth sufficient pam_usb.so
@include common-auth-nousb

cat /etc/pam.d/common-auth-nousb

auth    [success=1 default=ignore]      pam_unix.so nullok_secure try_first_pass
auth    requisite                       pam_deny.so
auth    required                        pam_permit.so

head /etc/pam.d/sddm

#%PAM-1.0

# Block login if they are globally disabled
auth    requisite       pam_nologin.so
auth    required        pam_succeed_if.so user != root quiet_success

# auth    sufficient      pam_succeed_if.so user ingroup nopasswdlogin
@include common-auth-nousb
# gnome_keyring breaks QProcess
-auth   optional        pam_gnome_keyring.so

这使得pam-auth-update毫无用处，但实现了目标:现在我可以通过插入密钥闪存启动，而不需要手动解锁。