Comment 17 for bug 388593

OS X does this by having multiple keychains - a "system" keychain that holds "common" items like WiFi passwords, and a "private" keychain that holds everything else.

One thing to be aware of with all of this however is support for corporate-style WPA connections where a username/password pair (and possibly even a certificate) are used rather than just a consumer-style password. In the corporate scenario the current behavior is "correct" - the username/password pair should only be unlocked by the user who's credentials are being used - we don't want Bob to be using Mary's credentials on the corporate wireless network!

Ignoring auto-login for the moment, another way to look at this is "WHY are users seeing that message?", the answer in many cases being the system password has been changed to be different from the Keychain password. Again there's two ways to handle this:

1. When the user changes their system password, ask if their keychain password should be changed as well. Probably difficult to implement for command line utils though like 'passwd' unless it can be plugged in to PAM somehow.

2. When the password prompt is being displayed immediately after login, display a message with some text like "You were prompted for this password as your Keychain password is currently different from your Login password. Would you like to change your Keychain password to match your Login password?"