Gnome Keyring Distributor Notes

Dependencies

These dependencies are required or recommended to build gnome-keyring:

• dbus >= 1.0

• glib-2.0 >= 2.16.0

• gtk+-2.0 >= 2.6.0

• gconf-2.0

• libgcrypt >= 1.2.2

• libpam optional: automatic unlocking of keyring will be disabled

• libtasn1 >= 0.3.4

Starting and Stopping the Gnome Keyring Daemon

• Integration and startup with PAM allows user does not need to enter any keyring passwords. A PAM module is provided for this purpose.

• Startup and shutdown of gnome-keyring-daemon is detailed on its own page.

Lockable Memory

• It is recommended, to configure the OS so that the user can use at least 256KB of lockable memory (ie: non-pageable). This will allow gnome-keyring to keep the encryption keys, and passwords from being paged to the disk.

Disabling Components

• If you would rather use another SSH agent, you can do so by clearing the gconf key:

  • /apps/gnome-keyring/daemon-components/ssh

Environment Variables

• The following environment variables are set by gnome-keyring:

  • GNOME_KEYRING_PID
    GNOME_KEYRING_SOCKET
    SSH_AUTH_SOCK

• More details on how environment variables are set on this page.

File Locations

• Gnome Keyring looks for passwords and encryption keys in the following locations:

  • ~/.ssh: SSH encryption keys

  • ~/.gnome2/keyrings: Password keyrings

  • ~/.gnome2/keystore: Encryption keys and certificates.

  • The location of CA Root certificates can be configured with the --with-root-certs=/path configure option. It is blank by default.