Re: unlock keychain with pam authentication

2015-09-29 Thread SGT. Garcia
On Tue, Sep 29, 2015 at 03:33:38PM +0100, Andrew Gallagher wrote: > On 29/09/15 15:28, Daniel Kahn Gillmor wrote: > > On Tue 2015-09-29 08:53:32 -0400, Andrew Gallagher > > wrote: > >> On 28/09/15 23:16, SGT. Garcia wrote: > >>> On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote:

Re: unlock keychain with pam authentication

2015-09-29 Thread Andrew Gallagher
On 29/09/15 15:28, Daniel Kahn Gillmor wrote: > On Tue 2015-09-29 08:53:32 -0400, Andrew Gallagher > wrote: >> On 28/09/15 23:16, SGT. Garcia wrote: >>> On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote: Do you ever import keys that other people send you? or keys

Re: unlock keychain with pam authentication

2015-09-29 Thread Daniel Kahn Gillmor
On Tue 2015-09-29 08:53:32 -0400, Andrew Gallagher wrote: > On 28/09/15 23:16, SGT. Garcia wrote: >> On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote: >>> >>> Do you ever import keys that other people >>> send you? or keys you find on the web? or keys attached to e-mail >>> m

Re: unlock keychain with pam authentication

2015-09-29 Thread Andrew Gallagher
On 28/09/15 23:16, SGT. Garcia wrote: > On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote: >> >> Do you ever import keys that other people >> send you? or keys you find on the web? or keys attached to e-mail >> messages? Are you sure the things imported can't include a secret

Re: unlock keychain with pam authentication

2015-09-29 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 04:10:10PM -0400, Daniel Kahn Gillmor wrote: > On Mon 2015-09-28 16:00:38 -0400, SGT. Garcia wrote: > > i really want it as the only authentication required that is open password > > from > > user logs him in and decrypts the passwords. > > > >> > that would be my email acc

Re: An update on poldi? [was: Re: unlock keychain with pam authentication]

2015-09-28 Thread NIIBE Yutaka
Thank you, dkg for Cc-ing. On 09/29/2015 02:05 AM, Daniel Kahn Gillmor wrote: > On Sun 2015-09-27 22:04:40 -0400, SGT. Garcia wrote: >> On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: >>> You might be interested in libpam-poldi: >>> >>> http://www.g10code.com/p-poldi.html >>

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 01:03:10PM -0400, Daniel Kahn Gillmor wrote: > > i send you a file dkg.asc that contains my OpenPGP certificate, and ask > you to import it into your keyring. you do "gpg --import dkg.asc". > > But in that file, in addition to my actual OpenPGP certificate, i've > include

Re: unlock keychain with pam authentication

2015-09-28 Thread Daniel Kahn Gillmor
On Mon 2015-09-28 16:00:38 -0400, SGT. Garcia wrote: > i really want it as the only authentication required that is open password > from > user logs him in and decrypts the passwords. > >> > that would be my email account not my local user account, correct? >> >> The attack i described is an atta

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 02:35:58PM -0400, Daniel Kahn Gillmor wrote: > On Mon 2015-09-28 13:16:06 -0400, SGT. Garcia wrote: > > i think neither is what i'm asking. the following particular use case should > > explain it better. > > > > on my user's first login into this machine i run 'notmuch new'

Re: unlock keychain with pam authentication

2015-09-28 Thread Daniel Kahn Gillmor
On Mon 2015-09-28 13:16:06 -0400, SGT. Garcia wrote: > i think neither is what i'm asking. the following particular use case should > explain it better. > > on my user's first login into this machine i run 'notmuch new' this calls > mbsync > to sync my email with gmail but in order for mbsync to d

Re: unlock keychain with pam authentication

2015-09-28 Thread SGT. Garcia
On Mon, Sep 28, 2015 at 01:03:10PM -0400, Daniel Kahn Gillmor wrote: > On Sun 2015-09-27 20:14:20 -0400, SGT. Garcia wrote: > > i use pass to manage my passwords: > > http://www.passwordstore.org/ > > > > all passwords are encrypted with one single passphrase which is what i would > > like to have

An update on poldi? [was: Re: unlock keychain with pam authentication]

2015-09-28 Thread Daniel Kahn Gillmor
On Sun 2015-09-27 22:04:40 -0400, SGT. Garcia wrote: > On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: >> You might be interested in libpam-poldi: >> >> http://www.g10code.com/p-poldi.html > > i get 'not found' error. google finds me this: > http://www.schiessle.org/howto/pol

Re: unlock keychain with pam authentication

2015-09-28 Thread Daniel Kahn Gillmor
On Sun 2015-09-27 20:14:20 -0400, SGT. Garcia wrote: > i use pass to manage my passwords: > http://www.passwordstore.org/ > > all passwords are encrypted with one single passphrase which is what i would > like to have in *sync* with pam's OK on user's successful authentication. This suggests that

Re: unlock keychain with pam authentication

2015-09-27 Thread SGT. Garcia
On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: > You might be interested in libpam-poldi: > > http://www.g10code.com/p-poldi.html i get 'not found' error. google finds me this: http://www.schiessle.org/howto/poldi.html assuming they're the same thing it mentions gnupg smar

Re: unlock keychain with pam authentication

2015-09-27 Thread SGT. Garcia
On Thu, Sep 24, 2015 at 11:09:28PM -0400, Daniel Kahn Gillmor wrote: > On Tue 2015-09-22 11:13:38 -0400, SGT. Garcia wrote: > > been looking for a solution to get gpg dance nicely with pam in the sense > > that > > once a user authenticated in keychain is unlocked. that is to have one > > central

Re: unlock keychain with pam authentication

2015-09-25 Thread Daniel Kahn Gillmor
On Tue 2015-09-22 11:13:38 -0400, SGT. Garcia wrote: > been looking for a solution to get gpg dance nicely with pam in the sense that > once a user authenticated in keychain is unlocked. that is to have one central > authentication that lasts for the duration of the user's session. You might be in

unlock keychain with pam authentication

2015-09-22 Thread SGT. Garcia
hello again, been looking for a solution to get gpg dance nicely with pam in the sense that once a user authenticated in keychain is unlocked. that is to have one central authentication that lasts for the duration of the user's session. well, no luck so far; any ideas? sgt.