https://bugs.kde.org/show_bug.cgi?id=526287
Bug ID: 526287
Summary: KDE Login don't work with PAM 2FA
Classification: Plasma
Product: plasma-login-manager
Version First 6.7.80
Reported In:
Platform: KDE Linux
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: general
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected], [email protected]
Target Milestone: ---
DESCRIPTION
I have my own PAM/NSS plugin, that support 2FA. I just tested in Cosmic and
have tested earlier in SDDM and GDM (Debian 13).
STEPS TO REPRODUCE
1. Enable 2FA for the user
2. Login
OBSERVED RESULT
KDE Login Manager prompt for password, then shakes with authentication denied.
It newer prompt for the second password (two factor authentication).
EXPECTED RESULT
KDE Login Manage show the 2FA prompt text it receives from PAM, and prompts for
the second kode/password.
SOFTWARE/OS VERSIONS
Operating System: KDE Linux 202608290254
KDE Plasma Version: 6.7.80
KDE Frameworks Version: 6.30.0
Qt Version: 6.11.2
Kernel Version: 7.1.10-arch1-1 (64-bit)
Graphics Platform: Wayland
Processors: 8 × Intel® Core™ i5-10210U CPU @ 1.60GHz
Memory: 32 GB of RAM (31,0 GB usable)
Graphics Processor: Intel® UHD Graphics
Manufacturer: HP
Product Name: HP 260 G4 Desktop Mini PC
ADDITIONAL INFORMATION
This is my working `/etc/pam.d/system-auth`:
```
#%PAM-1.0
-account [success=1 default=ignore] pam_systemd_home.so
account sufficient pam_mkhomedir.so
account sufficient libnss_rpc_repository.so
account required pam_unix.so
account optional pam_permit.so
account required pam_time.so
auth required pam_faillock.so
preauth
-auth [success=2 default=ignore] pam_systemd_home.so
auth sufficient pam_mkhomedir.so
auth [success=2 default=ignore] libnss_rpc_repository.so
auth [success=1 default=bad] pam_unix.so
try_first_pass nullok nodelay
auth [default=die] pam_faillock.so
authfail
auth optional pam_permit.so
auth required pam_env.so
auth required pam_faillock.so
authsucc
auth optional pam_faildelay.so
delay=0
-password [success=1 default=ignore] pam_systemd_home.so
password sufficient pam_mkhomedir.so
password sufficient libnss_rpc_repository.so
password required pam_unix.so
try_first_pass nullok nodelay shadow
password optional pam_permit.so
-session optional pam_systemd_home.so
session optional pam_mkhomedir.so
session required pam_limits.so
session optional libnss_rpc_repository.so
session required pam_unix.so
session optional pam_kwallet5.so
auto_start kwalletd=/usr/bin/ksecretd
session optional pam_permit.so
```
--
You are receiving this mail because:
You are watching all bug changes.
