This bug was fixed in the package gdm3 - 42.0-1ubuntu7.22.04.1
---
gdm3 (42.0-1ubuntu7.22.04.1) jammy; urgency=medium
* debian: Update vcs references to ubuntu/jammy branch
* debian/gdm3-gdm-smartcard*: Do not fail if pam_succeed_if suceeded.
We were not handling the success
This bug was fixed in the package gdm3 - 43.0-1ubuntu1.22.10.1
---
gdm3 (43.0-1ubuntu1.22.10.1) kinetic; urgency=medium
* debian: Update vcs references to ubuntu/kinetic branch
* debian/gdm3-gdm-smartcard*: Do not fail if pam_succeed_if suceeded.
We were not handling the
I verified the test results and am satisfied that they show the executed
planned test case, and that the results are correct. Since the test case
was a script, I also ran it successfully on a kinetic LXD.
The package built correctly in all architectures and Ubuntu releases it
was meant for.
Neil didn't clarify which ubuntu release he tested in his comment above,
but given that he is the one who filed this bug originally on kinetic
(22.10), and also confirmed in comment #12 that the issue was fixed,
I'll take this as verification done for kinetic, assuming it was the
test case number
Hi Chris,
To confirm, the fix is working fine for me when using a YubiKey with a
smartcard certificate loaded onto it.
* Neil
From: nore...@launchpad.net on behalf of Chris Halse
Rogers <1999...@bugs.launchpad.net>
Date: Wednesday, 29 March 2023 at 01:55
To: Neil Webster
Subject: [Bug
Can anyone do the testing for the kinetic update? Releasing to jammy-
updates is blocked on verifying the kinetic fix.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
Nathan, when using `sssd-gdm-smartcard-pam-auth-tester.sh` it does all
the checks that were failing before of this fix.
It doens't use the gdm UI directly, because there's no need for it, but
it indeed uses the gdm-smartcard PAM configuration that was the buggy
one. So if the script works for
The gdm3 update in jammy-proposed fixed the smartcard login issue for
us. Thanks.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing successful
Is there any update on this particular issue?
Rocky and RedHat version 8 systems can successfully use PIV
authentication in conjunction with SSSD and can be used on Government
systems. Ubuntu can not as of now.
Jim Graham
--
You received this bug notification because you are a member of
Test summary
Sorry but the test case is unclear to me. I don't consider it has
succeeded, I think some steps may be missing.
Test description
Started Jammy virtual machine, logged in with normal user, installed gdm
from jammy/proposed (42.0-1ubuntu7.22.04.1),
Hello Neil, or anyone else affected,
Accepted gdm3 into kinetic-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/gdm3/43.0-1ubuntu1.22.10.1 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
We discussed this a bit in the SRU team, and the external dependency is
"fine" because it's disabled by default. I would still prefer it's not
there, or at least that the default for OFFLINE_MODE was already 1 and
you wouldn't have to specify it when running the test, but this is not a
blocker for
Marco, why have you kept the code that may download a test script from a
github gist? I can more or less understand having that there while
testing/troubleshooting, but now? I know it's gated on a) OFFLINE_MODE
(although lunar has some changes in that area that are not in kinetic);
and b) the test
Hi, this seems to have fixed the issue. The different issue you saw was
relating to how I'd issued a test certificate to the YubiKey. I
resolved this and can confirm the fix works great (although I have been
having issues with pcscd.socket not triggering pcscd to run).
Will this fix be released
This bug was fixed in the package gdm3 - 43.0-3ubuntu1
---
gdm3 (43.0-3ubuntu1) lunar; urgency=medium
[ Simon McVittie ]
* d/tests: Don't reset root password.
Even if the root password is blank, we want to assert that
authentication still doesn't succeed, because we
I think we're talking of a different bug here though, because in your
log here pam_sss via gdm-smartcard always returns an authentication
failure:
Jan 31 22:22:25 lnx-ubu-2110 gdm-smartcard]: pam_sss(gdm-smartcard:auth):
authentication failure; logname= uid=0
euid=0 tty=/dev/tty1 ruser= rhost=
** Changed in: gdm3 (Ubuntu)
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing successful
pamtester results attached for both variations on the command ($USER and
"")
The result is permission denied as shown in your testing.
** Attachment added: "pamtester_result"
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1999884/+attachment/5644166/+files/pamtester_result
--
You
auth.log attached which contains everything from the moment the YubiKey
is inserted and PIN entered. I then removed it and typed the password
and logged in.
** Attachment added: "auth.log"
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1999884/+attachment/5644165/+files/auth.log
--
Thanks for the updates. I'll get this extra testing completed and come
back to you.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing
** Description changed:
+ [ Impact ]
+
+ gdm-smartcard returns a Permission denied when logging in with an user
+ name:
+
+ + pamtester -v gdm-smartcard ubuntu authenticate
+ pamtester: invoking pam_start(gdm-smartcard, ubuntu, ...)
+ pamtester: performing operation - authenticate
+ PIN for
** Changed in: sssd (Ubuntu)
Status: Triaged => Incomplete
** Changed in: gdm3 (Ubuntu)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
** Changed in: gdm3 (Ubuntu)
Status: Triaged => In Progress
** Also affects: sssd (Ubuntu Jammy)
Importance: Undecided
Ah, please also provide your auth.log as it may include some more infos
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing successful
Can you try to see what you get with pamtester, by using
pamtester -v gdm-smartcard $USER authenticate
Also try with:
pamtester -v gdm-smartcard "" authenticate
** Also affects: sssd (Ubuntu)
Importance: Undecided
Status: New
** Changed in: gdm3 (Ubuntu)
Importance: Undecided
I feel this is more a SSSD issue, so let's move it there.
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Title:
gdm-smartcard not passing successful authentication to desktop
** Attachment added: "syslog"
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1999884/+attachment/5635944/+files/syslog
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gdm3 in Ubuntu.
https://bugs.launchpad.net/bugs/1999884
Some additional information.
Authenticating with a password, then running kinit -X in a privileged
terminal window DOES work, everything matches and I get a kerberos
ticket.
Deleting everything from the YubiKey and issuing a brand new certificate
(instead of having 2 on the key) also doesn't
27 matches
Mail list logo
