Related to the desktop team specific needs, I wanted to mention that at the current state we don't expect to need or support pam-pkcs11 given that we want to rely only on pam-sss (that should be at this time more than enough for any need), other than being already in main.
So, while in debian [1] (and ubuntu) I've added both profiles for pam-sss and pam-pkcs11 the latter is mainly untested and not default (can be seleceted with update-alternatives in case).
Said this, if there are not other requirements for it, I'd consider it safe to be dropped from the MIR list from our POV.
Regarding pcscd, however... I think we need it.
I've done my testing with limited hardware here (mostly my national healthcare card) but that's only supported by opensc-pkcs11 IF pcscd is installed.
So I've the feeling we can't downgrade pcscd to a simple suggestion in most of the cases.
Hi,
Related to the desktop team specific needs, I wanted to mention that at the current state we don't expect to need or support pam-pkcs11 given that we want to rely only on pam-sss (that should be at this time more than enough for any need), other than being already in main.
So, while in debian [1] (and ubuntu) I've added both profiles for pam-sss and pam-pkcs11 the latter is mainly untested and not default (can be seleceted with update-alternatives in case).
Said this, if there are not other requirements for it, I'd consider it safe to be dropped from the MIR list from our POV.
Regarding pcscd, however... I think we need it.
I've done my testing with limited hardware here (mostly my national healthcare card) but that's only supported by opensc-pkcs11 IF pcscd is installed.
So I've the feeling we can't downgrade pcscd to a simple suggestion in most of the cases.
[1] https:/ /salsa. debian. org/gnome- team/gdm/ -/tree/ debian/ master/ debian