gdm wants to do smartcard auth against yubikey with pcscd installed

Bug #1950836 reported by Julian Andres Klode
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gdm3 (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

I recently installed pcscd for my smartcard reader to read cards using cardpeek. Upon reboot today, I was not greeted with the usual list of users, but instead it prompted me for a username and a smartcard pin and then failed to log in.

Removing the yubikey from the machine or removing the pcscd package from the system restored the user list and allowed me to login again.

ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: gdm3 41~rc-0ubuntu2
ProcVersionSignature: Ubuntu 5.13.0-22.22-generic 5.13.19
Uname: Linux 5.13.0-22-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu73
Architecture: amd64
CasperMD5CheckResult: unknown
CurrentDesktop: GNOME
Date: Sat Nov 13 00:01:40 2021
InstallationDate: Installed on 2018-03-14 (1339 days ago)
InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Alpha amd64 (20180313)
SourcePackage: gdm3
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
Julian Andres Klode (juliank) wrote :
Revision history for this message
Julian Andres Klode (juliank) wrote :

failed and good journals:

jak@jak-t480s:~:master$ journalctl --unit gdm -b -1
-- Journal begins at Thu 2021-10-14 06:52:48 CEST, ends at Sat 2021-11-13 00:05:23 CET. --
Nov 12 23:58:58 jak-t480s systemd[1]: Starting GNOME Display Manager...
Nov 12 23:58:58 jak-t480s systemd[1]: Started GNOME Display Manager.
Nov 12 23:58:59 jak-t480s gdm-launch-environment][2127]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0)
Nov 12 23:59:04 jak-t480s gdm-smartcard][2617]: pam_sss(gdm-smartcard:auth): User info message: Please insert smart card
Nov 12 23:59:06 jak-t480s gdm-smartcard][2617]: gkr-pam: no password is available for user

$ journalctl --unit gdm -b 0
-- Journal begins at Thu 2021-10-14 06:52:48 CEST, ends at Sat 2021-11-13 00:06:17 CET. --
Nov 13 00:01:15 jak-t480s systemd[1]: Starting GNOME Display Manager...
Nov 13 00:01:15 jak-t480s systemd[1]: Started GNOME Display Manager.
Nov 13 00:01:15 jak-t480s gdm-launch-environment][2097]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0)
Nov 13 00:01:19 jak-t480s gdm-password][2616]: gkr-pam: unable to locate daemon control file
Nov 13 00:01:19 jak-t480s gdm-password][2616]: gkr-pam: stashed password to try later in open session
Nov 13 00:01:19 jak-t480s gdm-password][2616]: pam_unix(gdm-password:session): session opened for user jak by (uid=0)

Revision history for this message
Daniel van Vugt (vanvugt) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 1933027, so it is being marked as such. Please look at the other bug report to see if there is any missing information that you can provide, or to see if there is a workaround for the bug. Additionally, any further discussion regarding the bug should occur in the other report. Feel free to continue to report any other bugs you may find.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gdm3 (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.