id summary reporter owner description type status priority milestone component resolution keywords cc fix_version see_also 162 Disable GNOME keyring prompt on SSH geofft "From mail to debathena@ on March 8, 2009: If you try to use SSH on cluster machines and you have a GNOME keyring (I don't know the conditions under which one would get created, but I have one), you get an annoying popup asking you to unlock your keyring, which is probably locked with an old Kerberos password. According to http://live.gnome.org/GnomeKeyring/Ssh , you can disable the prompt by setting the gconf key /apps/gnome-keyring/daemon-components/ssh to false. This may affect people who do want to use an SSH agent, though. Another option would be to figure out how to default gnome-keyring to not encrypt the keyring, which is probably acceptable given AFS permissions. This wouldn't help users who already have encrypted keyrings (unless we tell them to rm ~/.gnome2/keyrings/*). jdreed says we can just document how to do one of the above two options / remove the keyring, or disable the SSH agent by default and document how to enable it. A third option is to make debathena-ssh-client-config cause ssh_config to prefer Kerberos auth before public/private key auth. ghudson favors this one, as do I. We can do this by setting our own list of PreferredAuthentications, with GSSAPI before SSH keys." defect new trivial The Distant Future --