In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-01-15 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >
Share
Shulou(Shulou.com)06/01 Report--
This article will explain in detail what the concept of key ring in Ubuntu is. The editor thinks it is very practical, so I share it with you as a reference. I hope you can get something after reading this article.
If you have used the automatic login feature in Ubuntu or other Linux distributions, you may have encountered this pop-up message:
Please enter your password to unlock your login key ring
The login key ring is not unlocked when you log in to the system.
Enter Password To Unlock Your Login Keyring Ubuntu
If you keep clicking cancel, it will pop up several times before it disappears. You may wonder, why do you keep seeing this keyring message?
Let me tell you something. It's not really an error, it's a security feature.
Is that weird? Let me explain the concept of key ring in Linux.
What is the key ring in Linux? Why do you need it?
Why do you use a key ring (also called a key chain) in real life? You use it to string one or more keys together to make it easy to carry and find.
It's similar in Linux. The keyring feature allows your system to put all kinds of passwords together and store them in one place.
Most Linux desktop environments, such as GNOME, KDE, Xfce, etc., use GNOME keyrings to provide this functionality.
This key environmentally stores the ssh key, the GPG key, and the key of applications that use this feature, such as Chromium browsers. By default, the keyring is protected by a master password, which is usually the login password of the account.
Each user on the system has its own keyring, and the password is the same as the password of the user account itself. When you log in to the system with a password, your keyring will be automatically unlocked using the password of your account.
There is a problem when you enable the automatic login feature in Ubuntu. This means you don't need to enter a password to log in to the system. In this case, your key ring will not be unlocked automatically.
Key ring is a security feature
Remember when I said the key ring was a security feature? Now imagine turning on automatic login on your Linux computer. Anyone with access to your computer can access your system without a password. But you may not care, because you just use it to access the Internet.
However, if you use a browser such as Chromium or Google Chrome in Ubuntu and use it to save login passwords for various sites, you will have trouble. Anyone can use the browser and use the password you saved in the browser to log in to the site. Isn't that dangerous?
This is why when you use Chrome, it will repeatedly prompt you to unlock the keyring first. This ensures that only people who know the key ring password (that is, the account password) can use the password saved in the browser to log on to their related sites.
If you repeatedly cancel the prompt to unlock the keyring, it will eventually disappear and allow you to use the browser. However, the saved password will not be unlocked and you will see a "synchronization pause" prompt on your Chromium/Chome browser.
Sync paused in Google Chrome
If the key ring exists all the time, why have you never seen it?
If you've never seen it on your Linux system, it makes sense.
If you have never used the automatic login feature (or changing your account password), you may not even be aware of this feature.
This is because when you log in to the system through your password, your keyring is automatically unlocked by your account password.
Ubuntu (and other distributions) need to enter passwords to perform common administrative tasks such as changing users and installing new software, whether or not you are automatically logged in. But for everyday tasks such as using a browser, it does not need to enter a password because the key ring has been unlocked.
When you switch to automatic login, you no longer need to enter your login password. This means that the key ring is not automatically unlocked, so when you use a browser that takes advantage of the key ring feature, it will prompt you to unlock the key ring.
You can easily manage key rings and passwords
Where can I put this key ring? At its core is a daemon task (a program that runs automatically in the background).
Don't worry. You don't have to operate daemon tasks through the terminal. Most desktop environments come with a graphical application that can interact with this daemon. There are KDE wallets on KDE, GNOME and other desktops called "passwords and keys" (formerly Seahorse).
Password And Keys App in Ubuntu
You can use this GUI program to see which applications are using keyrings to manage / protect passwords.
As you can see, my system has a login key ring that is automatically created. There is also a key ring that stores GPG and SSH keys. That certificate is used to hold certificates issued by certification authorities (such as HTTPS certificates).
Password and Keys application in Ubuntu
You can also use this application to manually save the password of the site. For example, I created a new password-protected keyring called "Test" and manually stored a password.
This is better than saving a batch of passwords in a text file. At least in this case, your password is only allowed to be seen if you unlock the key ring through the password.
Saving New Password Seahorse
There is a potential problem. If you format your system, manually saved passwords are bound to be lost. Usually, you will back up your personal files, but not all user-specific data, such as keyring files.
There is a way to solve it. Keyring data is usually stored in the ~ / .local/share/keyrings directory. You can see all the key rings here, but you can't see their contents directly. If you remove the password of the keyring (I will describe the steps later in this article), you can read the contents of the keyring like a normal text file. You can copy the unlocked keyring file completely and run the password and key application on other Linux machines to import it.
Summarize what you have learned so far:
Most Linux systems have the key ring feature installed and activated by default
Each user on the system has his own key ring
The key ring is usually locked with the account password (protected)
The key ring will be unlocked automatically when you log in with a password
For automatic login, the keyring is not automatically unlocked, so you will be prompted to unlock it first when you try to use an application that depends on the keyring
Not all browsers or applications take advantage of the key ring feature
(on Linux) install a GUI program that can interact with the key ring
You can use key rings to manually store passwords in encrypted format
You can change the key ring password yourself.
You can obtain the manually saved password by exporting (you need to unlock the keyring first) and importing it to another computer.
Modify key ring password
Suppose you change your account password. When you log in, your system tries to unlock the key ring automatically with a new login password. But the keyring is still using the old login password.
In this case, you can change the key ring password to a new login password so that the password ring can be automatically unlocked when you log in to the system.
Open the password and key application from the menu:
Look for Password and Keys app in the menu
Right-click on the "Login" key ring and click "change password":
Change Keyring Password
What if you don't remember your old login password?
You may know that it is easy to reset forgotten passwords on Ubuntu. But the key ring still has a problem in this scenario. You changed the account password, but you don't remember the old account password that is still used by the keyring.
You can't change it because you don't know the old password. What shall I do?
In this case, you will have to remove the entire keyring. You can do this through the password and key application:
Delete Keyring Ubuntu
It will prompt you to confirm:
Delete Keyring
In addition, you can also delete the keyring file in the ~ / .local/share/keyrings directory manually.
After the old keyring file is removed, when you open Chrome/Chromium, it will prompt you to create a new keyring.
New Keyring Password
You can use the new login password and the key ring will be unlocked automatically.
Disable keyring password
When you want to log in automatically but do not want to unlock the keyring manually, you can use disabling the keyring password as a way to avoid it. Remember that you are disabling a security feature, so think twice.
The procedure is similar to modifying the key ring. Open the password and key application and change the key ring password.
The trick is that when it prompts to change the password, don't enter the new password, but click the "continue" button. This removes the password for the keyring.
Disable Keyring password by not setting any password at all
In this way, the key ring is not password protected and will always be unlocked.
This is the end of the article on "what is the concept of key ring in Ubuntu". I hope the above content can be of some help to you, so that you can learn more knowledge. if you think the article is good, please share it for more people to see.
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 0
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
© 2024 shulou.com SLNews company. All rights reserved.