Skip to main content
January 6, 2025
Question

1password asks for password and kde wallet every reboot

  • January 6, 2025
  • 8 replies
  • 770 views

Hello, recently I have installed kubuntu 24.10 with kde plasma wayland and 1password (installed through commands, not flatpak or snap) doesn't unlock with system authentication service.

Automatic unlock says it's unavailable on my system too.

After entering my password, it always asks me the system password for KDE wallet:

I don't see no entry in kde wallet gestor:

Which I think it may be there if I want it to be recognized everytime, but it's there in applications:

I think it is not adding itself to kde wallet correctly. Some times it even asks for 2fa from time to time.

I've tried with 1password ordinary and beta (now on 1Password for Linux 8.10.56-22)


1Password Version: 8.10.56-22
Extension Version: 8.10.56.28
OS Version: kubuntu 24.10
Browser: Not Provided

8 replies

MVascoAuthor
January 11, 2025

No help?

DenalB
January 14, 2025

@MVasco
May be this could help?

https://1password.community/discussion/comment/722951/#Comment_722951

I also got that issue in Gnome some months ago and had to install gnome-keyring. But I'm using KDE Plasma now and actually didn't have this issue there.

MVascoAuthor
January 14, 2025

Ok, gonna try but not as expert in linux yet: won't it mess with my kde-wallet and other apps?

MVascoAuthor
January 14, 2025

Well, edit:

No success. I had installed already gnome-keyring but wasn't being used by 1password. I uninstalled password, created a new keyring ("login") in gnome-keyring and 1password writes itself here but, again, every time I reboot I have to enter 1password password and then gnome-keyring password.

DenalB
January 14, 2025

Sorry, thought it could help ... 🙁

MVascoAuthor
January 16, 2025

This:

https://www.reddit.com/r/Kubuntu/comments/1aew6t3/what_changes_are_needed_in_pamd_for_the/

just worked for avoiding the kde-wallet issue.

1P_Dave
1Password Employee
January 27, 2025

Thank you for sharing MVasco. 🙂

-Dave

MVascoAuthor
February 8, 2025

Well, for me changing /etc/pam.d/sddm has been the solution to this:

#%PAM-1.0

#auth        include     system-login
#-auth       optional    pam_gnome_keyring.so
#-auth       optional    pam_kwallet5.so

#account     include     system-login

#password    include     system-login
#-password   optional    pam_gnome_keyring.so    use_authtok

#session     optional    pam_keyinit.so          force revoke
#session     include     system-login
#-session    optional    pam_gnome_keyring.so    auto_start
#-session    optional    pam_kwallet5.so         auto_start

# Bloquea el inicio de sesión si está globalmente deshabilitado
auth    requisite       pam_nologin.so
auth    required        pam_succeed_if.so user != root quiet_success

# Autenticación basada en Unix
auth [success=1 default=ignore] pam_unix.so nullok
##auth optional pam_kwallet5.so  # <--- Añadido aquí
# Fallback si ningún módulo tiene éxito
auth requisite pam_deny.so
# Asegura que haya un código de éxito si no hay otro
auth required pam_permit.so
# Módulo opcional para capacidades de usuario
auth optional pam_cap.so

# Deshabilita gnome-keyring y kwallet
-auth   optional        pam_gnome_keyring.so
-auth   optional        pam_kwallet5.so

account include system-login

# Reglas de sesión de SELinux
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close

# Inicialización de clave de sesión
session optional        pam_keyinit.so force revoke
session required        pam_limits.so
session required        pam_loginuid.so

session include system-login

# Asegurar contexto de SELinux
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open

# Deshabilita el inicio automático de gnome-keyring y kwallet
-session optional       pam_gnome_keyring.so auto_start
-session optional       pam_kwallet5.so auto_start

# Autenticación de keyring con PAM
auth optional pam_gnome_keyring.so  # <--- Añadido aquí
session optional pam_gnome_keyring.so auto_start  # <--- Añadido aquí

password include system-login

# Carga variables de entorno
session required        pam_env.so
session required        pam_env.so envfile=/etc/default/locale user_readenv=1

Now it doesn't unlock when I start session yet, but at least it doesn't ask for kde wallet nor gnome wallet.