Re: unlock keychain with pam authentication

2015-09-29 Thread SGT. Garcia
On Tue, Sep 29, 2015 at 03:33:38PM +0100, Andrew Gallagher wrote: > On 29/09/15 15:28, Daniel Kahn Gillmor wrote: > > On Tue 2015-09-29 08:53:32 -0400, Andrew Gallagher > > wrote: > >> On 28/09/15 23:16, SGT. Garcia wrote: > >>> On Mon, Sep 28, 2015 at 04:10:1

Re: unlock keychain with pam authentication

2015-09-29 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote: > On Mon 2015-09-28 16:00:38 -0400, SGT. Garcia wrote: > > i really want it as the only authentication required that is open password > > from > > user logs him in and decrypts the passwords. > > &g

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
OpenPGP certificate, i've > included an additional certificate that has your own user ID on it > ("SGT. Garcia "), uses a novel secret key, and > that secret key is encrypted by a password i know (let's say it's a > terrible password, like "bananas"). >

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 02:35:58PM -0400, Daniel Kahn Gillmor wrote: > On Mon 2015-09-28 13:16:06 -0400, SGT. Garcia wrote: > > i think neither is what i'm asking. the following particular use case should > > explain it better. > > > > on my user's first login

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 01:03:10PM -0400, Daniel Kahn Gillmor wrote: > On Sun 2015-09-27 20:14:20 -0400, SGT. Garcia wrote: > > i use pass to manage my passwords: > > http://www.passwordstore.org/ > > > > all passwords are encrypted with one single passphrase which is wh

Re: unlock keychain with pam authentication

2015-09-27 Thread SGT. Garcia
On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: > You might be interested in libpam-poldi: > > http://www.g10code.com/p-poldi.html i get 'not found' error. google finds me this: http://www.schiessle.org/howto/poldi.html assuming they're the same thing it mentions gnupg smar

Re: unlock keychain with pam authentication

2015-09-27 Thread SGT. Garcia
On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: > On Tue 2015-09-22 11:13:38 -0400, SGT. Garcia wrote: > > been looking for a solution to get gpg dance nicely with pam in the sense > > that > > once a user authenticated in keychain is unlocked

Re: default-ttl not honoured

2015-09-22 Thread SGT. Garcia
On Tue, Sep 22, 2015 at 07:39:53PM +0200, Neal H. Walfield wrote: > Hi, > > At Tue, 22 Sep 2015 11:07:22 -0400, > SGT. Garcia wrote: > > > > hello, > > this is my gpg-agent.conf: > > > > allow-preset-passphrase > > default-cache-ttl 31536000 >

Re: default-ttl not honoured

2015-09-22 Thread SGT. Garcia
forgot to include info! Linux 4.2.0 #1 SMP PREEMPT x86_64 GNU/Linux [Exherbo] sys-libs/glibc-2.22 sys-libs/ncurses-6.0 [ncurses-5 had the same problem] app-crypt/gnupg-2.1.7 sgt. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.or

default-ttl not honoured

2015-09-22 Thread SGT. Garcia
hello, this is my gpg-agent.conf: allow-preset-passphrase default-cache-ttl 31536000 this has stopped working! i'm getting asked for password every 20 minutes or so. anyone else hitting this bug? hopefully i don't have to go: "Oh, shit! Swamp leeches. Everybody, check for swamp leeches, and pull

unlock keychain with pam authentication

2015-09-22 Thread SGT. Garcia
hello again, been looking for a solution to get gpg dance nicely with pam in the sense that once a user authenticated in keychain is unlocked. that is to have one central authentication that lasts for the duration of the user's session. well, no luck so far; any ideas? sgt.