Quack,

I recently made changes to greetd to use PAM's common-* includes to fix
#1140029. Unfortunately that led to opening sessions no longer unlocking
KDE and GNOME keyrings.
libpam-gnome-keyring already provides a pam-configs integration but it
was incomplete and that is being fixed in #1142693. Please provide the
same kind of configuration for kwallet.

The rational being that only kwallet knows what config is right and can
adapt to future changes, and all existing and future login managers
should not have to try and keep in sync with the required configuration.
Overall that would simplify things a lot and ensure it's working fine
since you'd have control over it.

Regards.
\_o<

Hey,

I expect that this is feature request, as there was never a stanza for kwallet
shipped in PAM's common-* files. So far I understand the kwallet session
opening feature only works with sddm, as the pam module is modified to add
kwallet (or other login managers needs to add it).

I tried to find any docs about the file format on pam-configs, but havn't found
anything. Sure I can simply copy and replace the gome-keyring file, but at
least I want to understand what I do ;) Can you provide a working patch or
give more information, links to documentation about the needed changes?

regards,

hefee

TTBOMK the "documentation" for the file format is the source of
pam-auth-update, see https://salsa.debian.org/vorlon/pam/-/blob/master/debian/local/pam-auth-update?ref_type=heads

However the file format itself is not very complicated. Which PAM
lines are necessary is often the harder question...

Best,
Chris

Quack,

I see no reason why it should only work with sddm. There's a bunch of
folks using sway and other compositors without using the full GNOME or
KDE stack and they have been using these applications for many many
years, and some of them can take advantage of the keyring/wallet.

Based on the fix done for GNOME keyring and what sddm ships I guess it
should look like this:
----------------------------------------------------
Name: KDE Wallet Daemon - Login keyring management
Default: yes
Priority: 0
Auth-Type: Additional
Auth:
	optional     pam_kwallet5.so
Session-Type: Additional
Session-Interactive-Only: yes
Session:
	optional     pam_kwallet5.so auto_start
----------------------------------------------------

Regards.
\_o<

Hey,

Sure - I'm on your page, there is no reason why only sddm should work with
kwallet integration. That paragraph of mine was more a reflection about the
current state to understand, if we broke anything or what. The goal is clear,
ship such a stanza.

Form my point of view it also seems fine. A uploaded a version, that ships that
stanza.

Regards,

hefee

Hello,

Bug #1144267 in kwallet-pam reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/qt-kde-team/kde/kwallet-pam/-/commit/8a3095882c91f78c2db3f43621eb434696af0d1d
* Provide pam-configs integration (Closes: #1144267)
  - Ship a PAM configuration for the Password stanzas.
  - libpam-kwallet-common.{postinst,prerm}: run pam-auth-update.
  - Add libpam-runtime to Depends, for pam-auth-update.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1144267

Hello,

Bug #1144267 in kwallet-pam reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/qt-kde-team/kde/kwallet-pam/-/commit/8a3095882c91f78c2db3f43621eb434696af0d1d
* Provide pam-configs integration (Closes: #1144267)
  - Ship a PAM configuration for the Password stanzas.
  - libpam-kwallet-common.{postinst,prerm}: run pam-auth-update.
  - Add libpam-runtime to Depends, for pam-auth-update.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1144267

We believe that the bug you reported is fixed in the latest version of
kwallet-pam, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1144267@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sandro Knauß <hefee@debian.org> (supplier of updated kwallet-pam package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 20 Aug 2026 08:48:25 +0200
Source: kwallet-pam
Architecture: source
Version: 6.7.4-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Sandro Knauß <hefee@debian.org>
Closes: 1144267
Changes:
 kwallet-pam (6.7.4-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Sandro Knauß ]
   * Provide pam-configs integration (Closes: #1144267)
     - Ship a PAM configuration for the Password stanzas.
     - Add libpam-runtime to depends, because of pam-auth-update usage.
     - libpam-kwallet-common.{postinst,prerm}: run pam-auth-update.
     - Add a simple tests to check correct installation.
   * Bump the debhelper compatibility to 14:
      - bump the debhelper-compat build dependency to 14
      - drop the ${shlibs:Depends}, ${qml6:Depends}, and ${misc:Depends} substvars
Checksums-Sha1:
 ead33b8cf8136e87e7ac078bb48fe0c7c58315ee 2679 kwallet-pam_6.7.4-2.dsc
 1ce87bc911dbe8acbe7f8ab69de25c12a5333dac 17936 kwallet-pam_6.7.4-2.debian.tar.xz
 32c759050b77553083e6844bf19a23a7f4a1a0a4 9609 kwallet-pam_6.7.4-2_source.buildinfo
Checksums-Sha256:
 345474a66c11fa687531d58c77a3a22d8882eba18257b8c2c27c1fcc8f17dd07 2679 kwallet-pam_6.7.4-2.dsc
 a93828270df04b8614ef951bb4bc5fe46063068362be9f88e5e03a6d4b83b768 17936 kwallet-pam_6.7.4-2.debian.tar.xz
 4fba3cca3c838f71779b46280da557897c0afcf75c0d4a9e94c549897b3d1ff2 9609 kwallet-pam_6.7.4-2_source.buildinfo
Files:
 21261c343f6440bc94bc1eeeefd9c85a 2679 admin optional kwallet-pam_6.7.4-2.dsc
 0ad8fad2bd3ed25fa75b50fc81041ed5 17936 admin optional kwallet-pam_6.7.4-2.debian.tar.xz
 f3cbd611e6535300de6711f1a5f6d937 9609 admin optional kwallet-pam_6.7.4-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=3bCW
-----END PGP SIGNATURE-----