Forum Discussion

MVasco's avatar
MVasco
New Contributor
3 months ago

1password asks for password and kde wallet every reboot

Hello, recently I have installed kubuntu 24.10 with kde plasma wayland and 1password (installed through commands, not flatpak or snap) doesn't unlock with system authentication service.

Automatic unlock says it's unavailable on my system too.

After entering my password, it always asks me the system password for KDE wallet:

I don't see no entry in kde wallet gestor:

Which I think it may be there if I want it to be recognized everytime, but it's there in applications:

I think it is not adding itself to kde wallet correctly. Some times it even asks for 2fa from time to time.

I've tried with 1password ordinary and beta (now on 1Password for Linux 8.10.56-22)

1Password Version: 8.10.56-22
Extension Version: 8.10.56.28
OS Version: kubuntu 24.10
Browser: Not Provided

linux
  • MVasco's avatar
    MVasco
    New Contributor
    2 months ago

    Well, for me changing /etc/pam.d/sddm has been the solution to this:

    #%PAM-1.0

#auth        include     system-login
#-auth       optional    pam_gnome_keyring.so
#-auth       optional    pam_kwallet5.so

#account     include     system-login

#password    include     system-login
#-password   optional    pam_gnome_keyring.so    use_authtok

#session     optional    pam_keyinit.so          force revoke
#session     include     system-login
#-session    optional    pam_gnome_keyring.so    auto_start
#-session    optional    pam_kwallet5.so         auto_start

# Bloquea el inicio de sesión si está globalmente deshabilitado
auth    requisite       pam_nologin.so
auth    required        pam_succeed_if.so user != root quiet_success

# Autenticación basada en Unix
auth [success=1 default=ignore] pam_unix.so nullok
##auth optional pam_kwallet5.so  # <--- Añadido aquí
# Fallback si ningún módulo tiene éxito
auth requisite pam_deny.so
# Asegura que haya un código de éxito si no hay otro
auth required pam_permit.so
# Módulo opcional para capacidades de usuario
auth optional pam_cap.so

# Deshabilita gnome-keyring y kwallet
-auth   optional        pam_gnome_keyring.so
-auth   optional        pam_kwallet5.so

account include system-login

# Reglas de sesión de SELinux
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close

# Inicialización de clave de sesión
session optional        pam_keyinit.so force revoke
session required        pam_limits.so
session required        pam_loginuid.so

session include system-login

# Asegurar contexto de SELinux
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open

# Deshabilita el inicio automático de gnome-keyring y kwallet
-session optional       pam_gnome_keyring.so auto_start
-session optional       pam_kwallet5.so auto_start

# Autenticación de keyring con PAM
auth optional pam_gnome_keyring.so  # <--- Añadido aquí
session optional pam_gnome_keyring.so auto_start  # <--- Añadido aquí

password include system-login

# Carga variables de entorno
session required        pam_env.so
session required        pam_env.so envfile=/etc/default/locale user_readenv=1

    Now it doesn't unlock when I start session yet, but at least it doesn't ask for kde wallet nor gnome wallet.

  • MVasco's avatar
    MVasco
    New Contributor
    3 months ago

    Well, edit:

    No success. I had installed already gnome-keyring but wasn't being used by 1password. I uninstalled password, created a new keyring ("login") in gnome-keyring and 1password writes itself here but, again, every time I reboot I have to enter 1password password and then gnome-keyring password.

  • MVasco's avatar
    MVasco
    New Contributor
    3 months ago

    Ok, gonna try but not as expert in linux yet: won't it mess with my kde-wallet and other apps?