gdm wants to do smartcard auth against yubikey with pcscd installed
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gdm3 (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
I recently installed pcscd for my smartcard reader to read cards using cardpeek. Upon reboot today, I was not greeted with the usual list of users, but instead it prompted me for a username and a smartcard pin and then failed to log in.
Removing the yubikey from the machine or removing the pcscd package from the system restored the user list and allowed me to login again.
ProblemType: Bug
DistroRelease: Ubuntu 22.04
Package: gdm3 41~rc-0ubuntu2
ProcVersionSign
Uname: Linux 5.13.0-22-generic x86_64
NonfreeKernelMo
ApportVersion: 2.20.11-0ubuntu73
Architecture: amd64
CasperMD5CheckR
CurrentDesktop: GNOME
Date: Sat Nov 13 00:01:40 2021
InstallationDate: Installed on 2018-03-14 (1339 days ago)
InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Alpha amd64 (20180313)
SourcePackage: gdm3
UpgradeStatus: No upgrade log present (probably fresh install)
failed and good journals:
jak@jak- t480s:~ :master$ journalctl --unit gdm -b -1 environment] [2127]: pam_unix( gdm-launch- environment: session) : session opened for user gdm by (uid=0) [2617]: pam_sss( gdm-smartcard: auth): User info message: Please insert smart card [2617]: gkr-pam: no password is available for user
-- Journal begins at Thu 2021-10-14 06:52:48 CEST, ends at Sat 2021-11-13 00:05:23 CET. --
Nov 12 23:58:58 jak-t480s systemd[1]: Starting GNOME Display Manager...
Nov 12 23:58:58 jak-t480s systemd[1]: Started GNOME Display Manager.
Nov 12 23:58:59 jak-t480s gdm-launch-
Nov 12 23:59:04 jak-t480s gdm-smartcard]
Nov 12 23:59:06 jak-t480s gdm-smartcard]
$ journalctl --unit gdm -b 0 environment] [2097]: pam_unix( gdm-launch- environment: session) : session opened for user gdm by (uid=0) [2616]: gkr-pam: unable to locate daemon control file [2616]: gkr-pam: stashed password to try later in open session [2616]: pam_unix( gdm-password: session) : session opened for user jak by (uid=0)
-- Journal begins at Thu 2021-10-14 06:52:48 CEST, ends at Sat 2021-11-13 00:06:17 CET. --
Nov 13 00:01:15 jak-t480s systemd[1]: Starting GNOME Display Manager...
Nov 13 00:01:15 jak-t480s systemd[1]: Started GNOME Display Manager.
Nov 13 00:01:15 jak-t480s gdm-launch-
Nov 13 00:01:19 jak-t480s gdm-password]
Nov 13 00:01:19 jak-t480s gdm-password]
Nov 13 00:01:19 jak-t480s gdm-password]