[Bug 92845] KWallet should use PAM to make single-sign-on possible

[Tobias Schröpf]

http://bugs.kde.org/show_bug.cgi?id=92845


Tobias Schröpf tobias schroepf de changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |tobias at schroepf.de




--- Comment #50 from Tobias Schröpf <tobias schroepf de>  2008-11-16 12:11:52 ---
I think the option proposed in comment #47 is just fine:
  * let PAM and the Core-OS do what they are designed for: Authenticate the
user & authorize file access (here access to the secret key which is read-only
for the authenticated user)
    [to me this behaviour would be similar to that of using SSH-Keys for
passwordless SSH-authentication]
  * kwallet can use this secret key to encrypt/decrypt it's data

You could leave the option up to the user (in kwallets config) whether to use a
secret key in the homedir or an "old-style" password.