Untangling some gnarly pam configs

Technically not a newbie but I wasn’t sure where to ask this. My pam.d/sddm looks like this


auth        include     system-login
-auth       optional    pam_gnome_keyring.so
-auth       optional    pam_kwallet5.so

account     include     system-login

password    include     system-login
-password   optional    pam_gnome_keyring.so    use_authtok

session     optional    pam_keyinit.so          force revoke
session     include     system-login
-session    optional    pam_gnome_keyring.so    auto_start

-session         optional        pam_kwallet5.so auto_start kwalletd=/usr/bin/ksecretd

I manually added that session pam_kewallet5 setting at the bottom but the presence of the gnome keyring modules is confusing. Is it stock to use gnome-keyring? I am pretty sure kwalletd is my secret service provider but I don’t know how to check if anything is actually using the gnome keyring. If not I don’t even know what decided to add the pam_gnome* modules.

Can I just remove them?

welcome to the community DevDave.

THAT is not something I would touch with my skill level.

Someone else?