Date: Fri, 3 Mar 2023 22:39:43 +0100
From: =?utf-8?B?0KHRgtGA0LDRhdC40ZrQsCDQoNCw0LTQuNGb?= <contact@strahinja.org>
To: ~alpine/users@lists.alpinelinux.org
Subject: pam-gnupg on Alpine
Message-ID: <20230303213943.xsaidvc73ewgkowr@mithlond.localdomain>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="kt3qf6l2qb3wjqzq"
Content-Disposition: inline


--kt3qf6l2qb3wjqzq
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

I'm looking to activate pam-gnupg[1] on Alpine. I have read the
pam-gnupg Readme (even before, when I was setting it up on Artix), as
well as Alpine's Wiki page[2] about PAM, and tried installing
util-linux-login.

I have seen that /etc/pam.d/login includes=20
base-{auth,account,password,session}, and chose to add pam_gnupg.so to=20
/etc/pam.d/base-auth:

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D/etc/pam.d/base-auth=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D
# basic PAM configuration for Alpine.
auth    required        pam_env.so
auth    required        pam_unix.so     nullok_secure
auth    required        pam_nologin.so  successok
auth    optional        pam_gnupg.so store-only

auth    sufficient      pam_unix.so     nullok try_first_pass

account required        pam_nologin.so
account sufficient      pam_unix.so

password        sufficient      pam_unix.so     nullok sha512 shadow=20
try_first_pass use_authtok

-session        optional        pam_loginuid.so
-session        optional        pam_elogind.so
session         optional        pam_gnupg.so
session sufficient      pam_unix.so
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3DEnd=3Dof=3D/etc/pa=
m.d/base-auth=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D

However, using pam-gnupg settings (~/.pam-gnupg, etc) which work under
Artix, I'm still being prompted to enter password by GnuPG-using
programs, such as isync.

Can someone point out how can I set up pam-gnupg under Alpine? I'm not
sure if I picked the correct location to insert pam_gnupg.so calls,
for example.

Thanks in advance,
Strahinya


[1]: https://github.com/cruegge/pam-gnupg
[2]: https://wiki.alpinelinux.org/wiki/PAM

--kt3qf6l2qb3wjqzq
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=3OBJ
-----END PGP SIGNATURE-----

--kt3qf6l2qb3wjqzq--