Bug 346291 – Keychain guide deficiencies under KDE

• Product: [OLD] Docs on www.gentoo.org
• Status: RESOLVED NEEDINFO

[Description Matthew Marlowe 2010-11-21 11:25:46 UTC]

Most linux distributions these days make it easy to automatically load ssh keys at the start of a X session via a pop-up applet requesting a keyphrase and then invoking keychain and/or ssh-add directly to activate ssh-agent properly.

Recent versions of KDE under Gentoo do not do this.

The closest official gentoo document that attempts to solve the problem is the keychain guide at:
http://www.gentoo.org/doc/en/keychain-guide.xml

However, the process in the document::

a)  does not ensure that the X applet is started and instead requires the user to initiate an auth request via the command line at every x session login.  The end result is numerous forum posts asking how to do this.
This may cause a negative first impression of new gentoo users.

b) does not include any references to other pages/docs for resolving common issues w/ seamless remote access to external servers via ssh (the default ssh_config file needs to be substantially modified in order to be inter operable)

c) is slightly more complex than it needs to be as it puts keychain invokation in user bash environmental scripts rather than kde startup/shutdown.  We only need to source the existing keychain files in the bash scripts.

For the time being, I've documented a slightly different process that seems to go step to step in configuring a new gentoo kde workstation to use keychain:

http://www.deploylinux.net/matt/2010/11/#000074



Reproducible: Always

[Comment 1 nm (RETIRED) 2010-11-21 11:37:42 UTC]

KDE team: any thoughts on the keychain guide needed for working with stable versions of KDE4?

[Comment 2 Theo Chatzimichos (RETIRED) 2011-02-28 19:03:48 UTC]

Matt's article seems fine, just a small change: there is a ksshaskpass package, I suppose it can substitute x11-ssh-askpass

[Comment 3 nm (RETIRED) 2011-02-28 21:00:25 UTC]

(In reply to comment #2)
> Matt's article seems fine, just a small change: there is a ksshaskpass package,
> I suppose it can substitute x11-ssh-askpass
> 

Maybe, but we can't document ~arch stuff, only stable.

[Comment 4 Tomáš Chvátal (RETIRED) 2011-05-13 09:44:15 UTC]

Its stable now.

[Comment 5 nm (RETIRED) 2011-05-13 23:54:10 UTC]

Can you attach a patch to our guide? Having to go offsite for this is difficult.

You can grab the source for the doc by running "wget http://www.gentoo.org/doc/en/keychain-guide.xml?passthru=1 -o keychain-guide.xml", then saving a copy and editing the original. diff -Nut for to make it easier for the GDP to see what needs doing. Thanks!