[1391] in athena10
Disabling GNOME keyring prompt on SSH
daemon@ATHENA.MIT.EDU (Geoffrey Thomas)
Sun Mar 8 08:33:42 2009
Date: Sun, 8 Mar 2009 08:32:43 -0400 (EDT)
From: Geoffrey Thomas <geofft@MIT.EDU>
To: debathena@mit.edu
Message-ID: <alpine.DEB.2.00.0903080824390.6057@geminorum.mit.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
If you try to use SSH on cluster machines, it's the case for many users
[*] that you get an annoying popup asking you to unlock your keyring
(which was created for some other purpose, probably with an old Kerberos
password, and doesn't include any SSH keys). According to
http://live.gnome.org/GnomeKeyring/Ssh , you can disable the prompt by
setting the gconf key /apps/gnome-keyring/daemon-components/ssh to false.
This may affect people who do want to use an SSH agent, though.
Another option would be to figure out how to default gnome-keyring to not
encrypt the keyring, which is probably acceptable given AFS permissions.
This wouldn't help users who already have encrypted keyrings (unless we
tell them to rm ~/.gnome2/keyrings/*).
I think a third option is to make debathena-ssh-client-config cause
ssh_config to prefer Kerberos auth before public/private key auth.
Which should we do?
--
Geoffrey Thomas
geofft@mit.edu
[*] I don't know what the conditions are. I have both a (tiny, probably
effectively empty) keyring and SSH keys; maybe not having one of these
makes the problem not appear. I've seen other people report this problem,
but I bet they have both of these too.
