https://bugs.kde.org/show_bug.cgi?id=481143

            Bug ID: 481143
           Summary: pam_u2f didn't work
    Classification: Plasma
           Product: kscreenlocker
           Version: 5.27.10
          Platform: Arch Linux
                OS: Linux
            Status: REPORTED
          Severity: wishlist
          Priority: NOR
         Component: general
          Assignee: plasma-b...@kde.org
          Reporter: chris200...@googlemail.com
  Target Milestone: ---

SUMMARY
I configured successfully lightdm with PAM modul "pam_u2f" from yubico but with
kscreenlocker didn't work.


STEPS TO REPRODUCE
1. sudo pacman -S extra/pam-u2f
2. sudo mkdir /etc/fido_key
3. sudo sh -c 'pamu2fcfg -u user >> /etc/fido_key/u2f_keys'
4. sudo sh -c 'cat /etc/pam.d/login >> /etc/pam.d/kde'
5. sudo sh -c 'echo "auth   sufficient   pam_u2f.so
authfile=/etc/fido_key/u2f_keys" >> /etc/pam.d/kde'
6. Lock the Screen and try to unlock

OBSERVED RESULT
because of "sufficient" and not "required" it unlocks the screen immediately
without Touching the Button on the Fido2 Stick after entering the password

EXPECTED RESULT
Unlock the screen if Touched the Button on Fido2 Stick after entering the
password

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 5.27.10
KDE Frameworks Version: 5.114.0
Qt Version: 5.15.12
Kernel-Version: 6.7.3-arch1-1 (64-bit)
Wayland

ADDITIONAL INFORMATION
-

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to