Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 346291 - Keychain guide deficiencies under KDE
Summary: Keychain guide deficiencies under KDE
Status: RESOLVED NEEDINFO
Alias: None
Product: [OLD] Docs on www.gentoo.org
Classification: Unclassified
Component: Other documents (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Docs Team
URL: http://www.gentoo.org/doc/en/keychain...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-11-21 11:25 UTC by Matthew Marlowe
Modified: 2011-05-13 23:54 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthew Marlowe 2010-11-21 11:25:46 UTC
Most linux distributions these days make it easy to automatically load ssh keys at the start of a X session via a pop-up applet requesting a keyphrase and then invoking keychain and/or ssh-add directly to activate ssh-agent properly.

Recent versions of KDE under Gentoo do not do this.

The closest official gentoo document that attempts to solve the problem is the keychain guide at:
http://www.gentoo.org/doc/en/keychain-guide.xml

However, the process in the document::

a)  does not ensure that the X applet is started and instead requires the user to initiate an auth request via the command line at every x session login.  The end result is numerous forum posts asking how to do this.
This may cause a negative first impression of new gentoo users.

b) does not include any references to other pages/docs for resolving common issues w/ seamless remote access to external servers via ssh (the default ssh_config file needs to be substantially modified in order to be inter operable)

c) is slightly more complex than it needs to be as it puts keychain invokation in user bash environmental scripts rather than kde startup/shutdown.  We only need to source the existing keychain files in the bash scripts.

For the time being, I've documented a slightly different process that seems to go step to step in configuring a new gentoo kde workstation to use keychain:

http://www.deploylinux.net/matt/2010/11/#000074



Reproducible: Always
Comment 1 nm (RETIRED) gentoo-dev 2010-11-21 11:37:42 UTC
KDE team: any thoughts on the keychain guide needed for working with stable versions of KDE4?
Comment 2 Theo Chatzimichos (RETIRED) archtester gentoo-dev Security 2011-02-28 19:03:48 UTC
Matt's article seems fine, just a small change: there is a ksshaskpass package, I suppose it can substitute x11-ssh-askpass
Comment 3 nm (RETIRED) gentoo-dev 2011-02-28 21:00:25 UTC
(In reply to comment #2)
> Matt's article seems fine, just a small change: there is a ksshaskpass package,
> I suppose it can substitute x11-ssh-askpass
> 

Maybe, but we can't document ~arch stuff, only stable.
Comment 4 Tomáš Chvátal (RETIRED) gentoo-dev 2011-05-13 09:44:15 UTC
Its stable now.
Comment 5 nm (RETIRED) gentoo-dev 2011-05-13 23:54:10 UTC
Can you attach a patch to our guide? Having to go offsite for this is difficult.

You can grab the source for the doc by running "wget http://www.gentoo.org/doc/en/keychain-guide.xml?passthru=1 -o keychain-guide.xml", then saving a copy and editing the original. diff -Nut for to make it easier for the GDP to see what needs doing. Thanks!