2021-03-01 20:43:27 |
Marco Trevisan (Treviño) |
bug |
|
|
added bug |
2021-03-01 20:43:55 |
Marco Trevisan (Treviño) |
bug watch added |
|
https://github.com/SSSD/sssd/issues/5400 |
|
2021-03-01 20:43:55 |
Marco Trevisan (Treviño) |
bug task added |
|
sssd |
|
2021-03-01 20:44:25 |
Marco Trevisan (Treviño) |
bug task added |
|
gdm (Ubuntu) |
|
2021-03-01 20:44:34 |
Marco Trevisan (Treviño) |
affects |
gdm (Ubuntu) |
gdm3 (Ubuntu) |
|
2021-03-01 20:44:42 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu): assignee |
|
Marco Trevisan (Treviño) (3v1n0) |
|
2021-03-01 20:44:48 |
Marco Trevisan (Treviño) |
sssd (Ubuntu): assignee |
|
Sergio Durigan Junior (sergiodj) |
|
2021-03-01 20:44:53 |
Marco Trevisan (Treviño) |
sssd (Ubuntu): status |
In Progress |
Triaged |
|
2021-03-01 20:44:55 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu): status |
New |
In Progress |
|
2021-03-01 20:44:59 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu): importance |
Undecided |
Medium |
|
2021-03-01 21:24:54 |
Bug Watch Updater |
sssd: status |
Unknown |
Fix Released |
|
2021-03-15 21:19:09 |
Sergio Durigan Junior |
sssd (Ubuntu): status |
Triaged |
In Progress |
|
2021-04-20 08:16:30 |
Iain Lane |
bug |
|
|
added subscriber Iain Lane |
2021-04-21 16:43:41 |
Marco Trevisan (Treviño) |
sssd (Ubuntu): status |
In Progress |
Triaged |
|
2021-04-21 16:43:48 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu): status |
In Progress |
Fix Committed |
|
2021-04-21 16:53:54 |
Marco Trevisan (Treviño) |
description |
Insert a smartcard that has an user associated to it:
-> gdm is expected to select the user associated to it and allow authentication
SSSD side of fix is part of 2.4.1 and should be handled by https://github.com/SSSD/sssd/pull/5401/
(+ commit https://github.com/SSSD/sssd/commit/4ea1739d09b)
GDM should instead handle empty users properly both in the PAM config and sending the info back to gnome-shell. |
[ Impact ]
Smartcard user is not selected automatically when inserting a smartcard
[ Test case ]
Insert a smartcard that has an user associated to it:
-> gdm is expected to select the user associated to it and start the authentication
requesting the card PIN, without having to explicitly write the username.
[ Regression potential ]
PAM configuration for smartcard changed the order [1] we check the services, so:
- if a /var/run/nologin the user will be denied for accessing the system only
after that the PIN has been inserted.
- root may be an allowed user, if associated to a smartcard (even though we trust SSSD
PAM module and configuration explicitly disallows it).
[1] https://salsa.debian.org/gnome-team/gdm/-/compare/90e71bd4...d32be2e5
---
There's a SSSD side of this fix (for the carts with multiple certificates) that is part of 2.4.1 and should be handled by https://github.com/SSSD/sssd/pull/5401/
(+ commit https://github.com/SSSD/sssd/commit/4ea1739d09b)
GDM should instead handle empty users properly both in the PAM config and sending the info back to gnome-shell. |
|
2021-06-01 20:46:05 |
Brian Murray |
bug |
|
|
added subscriber Brian Murray |
2021-06-01 20:46:12 |
Brian Murray |
gdm3 (Ubuntu): status |
Fix Committed |
Incomplete |
|
2021-06-02 09:47:40 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu): status |
Incomplete |
Fix Committed |
|
2021-06-02 09:47:56 |
Marco Trevisan (Treviño) |
nominated for series |
|
Ubuntu Hirsute |
|
2021-06-02 09:47:56 |
Marco Trevisan (Treviño) |
bug task added |
|
sssd (Ubuntu Hirsute) |
|
2021-06-02 09:47:56 |
Marco Trevisan (Treviño) |
bug task added |
|
gdm3 (Ubuntu Hirsute) |
|
2021-06-02 09:48:06 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Hirsute): importance |
Undecided |
Medium |
|
2021-06-02 09:48:06 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Hirsute): status |
New |
Fix Committed |
|
2021-06-02 09:48:06 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Hirsute): assignee |
|
Marco Trevisan (Treviño) (3v1n0) |
|
2021-06-02 09:48:07 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Hirsute): importance |
Undecided |
Medium |
|
2021-06-02 09:48:07 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Hirsute): status |
New |
Triaged |
|
2021-06-02 09:48:07 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Hirsute): assignee |
|
Sergio Durigan Junior (sergiodj) |
|
2021-06-02 15:40:03 |
Brian Murray |
removed subscriber Brian Murray |
|
|
|
2021-06-02 15:40:06 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
2021-06-02 15:40:10 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
2021-06-02 15:40:14 |
Brian Murray |
tags |
|
verification-needed verification-needed-hirsute |
|
2021-06-15 13:12:14 |
Launchpad Janitor |
gdm3 (Ubuntu): status |
Fix Committed |
Fix Released |
|
2021-08-23 01:30:38 |
Mathew Hodson |
sssd (Ubuntu): status |
Triaged |
Fix Released |
|
2022-01-26 21:57:23 |
Brian Murray |
gdm3 (Ubuntu Hirsute): status |
Fix Committed |
Won't Fix |
|
2022-01-26 21:57:27 |
Brian Murray |
sssd (Ubuntu Hirsute): status |
Triaged |
Won't Fix |
|
2023-01-27 13:36:33 |
Marco Trevisan (Treviño) |
nominated for series |
|
Ubuntu Focal |
|
2023-01-27 13:36:33 |
Marco Trevisan (Treviño) |
bug task added |
|
sssd (Ubuntu Focal) |
|
2023-01-27 13:36:33 |
Marco Trevisan (Treviño) |
bug task added |
|
gdm3 (Ubuntu Focal) |
|
2023-01-27 13:36:43 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Focal): status |
New |
In Progress |
|
2023-01-27 13:36:48 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Focal): status |
New |
In Progress |
|
2023-01-27 13:36:51 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Focal): assignee |
|
Marco Trevisan (Treviño) (3v1n0) |
|
2023-01-27 13:36:53 |
Marco Trevisan (Treviño) |
sssd (Ubuntu Focal): importance |
Undecided |
Medium |
|
2023-01-27 13:36:56 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Focal): importance |
Undecided |
Medium |
|
2023-01-27 13:37:00 |
Marco Trevisan (Treviño) |
gdm3 (Ubuntu Focal): assignee |
|
Marco Trevisan (Treviño) (3v1n0) |
|