Public bug reported:
== Impact ==
Logging in with a smart card inserted fails if no module providing smart
card authentication is installed (as it's by default in 22.04).
== Test cases ==
Ensure this profile is set in gdm:
1. sudo update-alternatives --set gdm-smartcard
/etc/pam.d/gdm-smartcard-sssd-exclusive
2. sudo apt remove libpam-sss
3. sudo systemctl restart gdm
4. Login with gdm with a smartcard inserted (and not configured)
Repeat the same ensuring that libpam-pkcs11 is not installed and
/etc/pam.d/gdm-smartcard-pkcs11-exclusive is selected via update-
alternatives
1. sudo update-alternatives --set gdm-smartcard
/etc/pam.d/gdm-smartcard-pkcs11-exclusive
2. sudo apt remove libpam-pkcs11
3. sudo systemctl restart gdm
4. Login with gdm with a smartcard inserted (and not configured)
== Regression potential ==
Smart card authentication does not work anymore.
User is authenticated even though the smart card authentication failed.
** Affects: gdm3 (Ubuntu)
Importance: Medium
Assignee: Marco Trevisan (Treviño) (3v1n0)
Status: Fix Released
** Affects: gdm3 (Ubuntu Jammy)
Importance: Medium
Assignee: Marco Trevisan (Treviño) (3v1n0)
Status: Fix Committed
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/2090884
Title:
Logging in with a smartcard is not possible if sssd (libpam-sss) is
not installed
Status in gdm3 package in Ubuntu:
Fix Released
Status in gdm3 source package in Jammy:
Fix Committed
Bug description:
== Impact ==
Logging in with a smart card inserted fails if no module providing
smart card authentication is installed (as it's by default in 22.04).
== Test cases ==
Ensure this profile is set in gdm:
1. sudo update-alternatives --set gdm-smartcard
/etc/pam.d/gdm-smartcard-sssd-exclusive
2. sudo apt remove libpam-sss
3. sudo systemctl restart gdm
4. Login with gdm with a smartcard inserted (and not configured)
Repeat the same ensuring that libpam-pkcs11 is not installed and
/etc/pam.d/gdm-smartcard-pkcs11-exclusive is selected via update-
alternatives
1. sudo update-alternatives --set gdm-smartcard
/etc/pam.d/gdm-smartcard-pkcs11-exclusive
2. sudo apt remove libpam-pkcs11
3. sudo systemctl restart gdm
4. Login with gdm with a smartcard inserted (and not configured)
== Regression potential ==
Smart card authentication does not work anymore.
User is authenticated even though the smart card authentication
failed.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/2090884/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
