Login screen asks for password twice

[akkad]

i have asked this many times, i believe there is a solution for this :

i have edited some configuration for keyring to stop asking for the keyring password in every login where it went fine, but after that the login screen started to ask me to enter the password twice to be able to login, any idea how to make it ask for the password just one time ???

[Koybe]

It seems to be a pam problem.

What did you do to any pam files? (/etc/pam.d)

[akkad]

as forum suggested i have added the following to this file /etc/pam.d/gdm :
auth optional pam_keyring.so try_first_pass
session optional pam_keyring.so

[Koybe]

I guess you installed libpam-keyring package.

So instead of

 auth	optional	pam_keyring.so try_first_pass
session	optional	pam_keyring.so

in /etc/pam.d/gdm

just put :

@include common-pamkeyring

[akkad]

ok here is what i did :
- sudo gedit /etc/pam.d/gdm
- then i did the replacement u told me about

but it is still the same i should enter the password two times

[Koybe]

Could you explain more?

When exactly are you asked for the password the second time? Both in login screen? One before, one after?

Eventually, post your /etc/pam.d/common-auth, /etc/pam.d/common-account and /etc/pam.d/gdm

[dca]

It's possible network manager is asking the p/w after login when detecting networks???

[akkad]

here is the case exactly :
on the login screen itself i asked to enter the username first then password, as i enter the password and then press enter the password text field is cleared and i should enter the password again after that it will login and load desktop.

guys am not talking about the network password or the keyring password, it is all in the login screen before loading the desktop, but i mentioned the keyring in my post because this behavior appeared after i did the configuration for keyring.

[Koybe]

Ok. Could you then post the files I asked you?

cat /etc/pam.d/common-account
cat /etc/pam.d/common-auth
cat /etc/pam.d/gdm

[akkad]

the result for cat /etc/pam.d/common-account :
#
# /etc/pam.d/common-account - authorization settings common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authorization modules that define
# the central access policy for use on the system. The default is to
# only deny service to users whose accounts are expired in /etc/shadow.
#
account required pam_unix.so


the result for cat /etc/pam.d/common-auth:
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the
# traditional Unix authentication mechanisms.
#
auth required pam_unix.so nullok_secure


the result for cat /etc/pam.d/gdm :
#%PAM-1.0
auth optional pam_keyring.so try_first_pass
session optional pam_keyring.so
auth requisite pam_nologin.so
auth required pam_env.so
@include common-auth
@include common-account
session required pam_limits.so
@include common-session
@include common-password


i hope i got u the needed output.