This was created years ago; at the time I'd been a Shibboleth admin for nearly a decade but we needed something that could handle OIDC/OAuth and that explicitly supported OpenJDK. After a lot of investigation, I really liked Keycloak/Red Hat Single Sign-On. More details here: Gluu vs keycloack vs wso2 identity management
(Items in bold indicate possible concerns)
(based on these two blog entries and inspired by Fedora-Blog)
First install pam_kwallet:
sudo zypper in pam_kwallet
Then edit the files /etc/pam.d/passwd, /etc/pam.d/login and /etc/pam.d/sddm as follows, i.e. add the lines beginning with a - (the hyphens are valid PAM syntax to reduce log entries if these PAM modules should not exist) and ending with the ### comment:
/etc/pam.d/passwd :
| # ~/.asoundrc or /etc/asound.conf | |
| # ALSA configuration file | |
| ##### USAGE ##### | |
| # Save this file as "~/.asoundrc" (for user-specific sound configuration) or | |
| # "/etc/asound.conf" (for system-wide sound configuration) and specify ALSA | |
| # device names ad described in the next section. | |
| ##### DEVICE NAMES ##### |