Hi Chris,
To confirm, the fix is working fine for me when using a YubiKey with a
smartcard certificate loaded onto it.
* Neil
From: nore...@launchpad.net on behalf of Chris Halse
Rogers <1999...@bugs.launchpad.net>
Date: Wednesday, 29 March 2023 at 01:55
To: Neil Webster
Subject
Hi, this seems to have fixed the issue. The different issue you saw was
relating to how I'd issued a test certificate to the YubiKey. I
resolved this and can confirm the fix works great (although I have been
having issues with pcscd.socket not triggering pcscd to run).
Will this fix be released
pamtester results attached for both variations on the command ($USER and
"")
The result is permission denied as shown in your testing.
** Attachment added: "pamtester_result"
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1999884/+attachment/5644166/+files/pamtester_result
--
You
auth.log attached which contains everything from the moment the YubiKey
is inserted and PIN entered. I then removed it and typed the password
and logged in.
** Attachment added: "auth.log"
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1999884/+attachment/5644165/+files/auth.log
--
Thanks for the updates. I'll get this extra testing completed and come
back to you.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing
** Attachment added: "syslog"
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1999884/+attachment/5635944/+files/syslog
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Some additional information.
Authenticating with a password, then running kinit -X in a privileged
terminal window DOES work, everything matches and I get a kerberos
ticket.
Deleting everything from the YubiKey and issuing a brand new certificate
(instead of having 2 on the key) also doesn't
Public bug reported:
For information I've repeated this entire process on RHEL8 and it works
there, it also was working upon last test on Ubuntu 20.04
Releases: 22.04 LTS and 22.10
Package Version (for reporting purposes): 43.0-1ubuntu1
Background:
System has been configured with sssd, krb5