Jim, you should run Keychain First Aid, located in the menu within Keychain Access. Of course if your friend doesn't know his login password it won't work. He may have to reset his password using the install disk and then throw away his login keychain and start anew.
Also suggest running a permissions repair.
If he does know the password he could see if this helps:
To set up automatic keychain access for an application:
Open Keychain Access, located in Applications/Utilities.
Click Show Keychains if the Keychains list is not open, then select a keychain.
Select Application in the Passwords category. Click the disclosure triangle if Application doesn't appear.
Double-click the password in the Keychain window, then click Access Control.
To allow access to this password by any application, select "Allow all applications to access this item."
To control access to this password, select "Confirm before allowing access."
To require the keychain password instead of the application password, select "Ask for Keychain password."
To add individual applications that can access this password, click Add (+) and navigate to the application you want to add.
IMPORTANT: If you select "Allow all applications to access this item" for an item in your keychain, you make it easy for a computer virus or other software to read the password.
Click Save.
More reading:
http://books.google.com/books?id=-ynfWvkwz...esult#PPA200,M1