** No longer affects: pam (Ubuntu)
** No longer affects: pam (Ubuntu Bionic)
** No longer affects: pam (Ubuntu Focal)
** No longer affects: pam (Ubuntu Groovy)
** Also affects: gdm3 (Debian) via
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=953557
Importance: Unknown
Status:
Though I do understand it is a bit annoying that smartcard login on
bionic doesn't work, it worries me that fixing this would involve a lot
of backporting. This isn't a regression and bionic has been like this
from day 0, right? Do we have an understanding on how wanted this is on
bionic?
I'm not
(I have ping sil2100 internally for him to provide his 2 cents on this
bug.)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard pam config needs to
Lukasz (sil2100) can we have your SRU team input on this bug with regard
to Bionic/18.04lTS ?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard pam
While Bionic could be maybe supported, that would likely require newer
SSSD.
Maybe in such case a pam_pkcs11 based solution could be provided, but
it's quite a lot of backporting work which would need SRU team to agree
with.
--
You received this bug notification because you are a member of
** Changed in: gnome-settings-daemon (Ubuntu Focal)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
** Changed in: gnome-settings-daemon (Ubuntu Groovy)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
--
You received this bug notification because you are a member
The solution is going to require sssd which started being used in focal,
we are not going to do official updates to bionic
** Changed in: gdm3 (Ubuntu Bionic)
Status: New => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
** Changed in: gdm3 (Ubuntu Bionic)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
g-s-d p11-kit backend ready at https://gitlab.gnome.org/GNOME/gnome-
settings-daemon/-/merge_requests/208
** Also affects: gnome-settings-daemon (Ubuntu)
Importance: Undecided
Status: New
** Changed in: gnome-settings-daemon (Ubuntu)
Importance: Undecided => Medium
** Changed in:
** Changed in: gdm3 (Ubuntu Focal)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard
I unfortunately don't have a smartcard device handy to test/debug/
but if I compare with RHEL which is known to be working...
Redhat has the following configuration "gdm-smarcard" which includes
"smartcard-auth", a symlink pointing to "smartcard-auth-local"
I think we should 'mimic' this (at
Right, as pointed out in previous comments the configuration as it is
today isn't workin on Debian/Ubuntu systems, the first step would be to
have someone understand those pam details working out those parts
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
# git clone https://gitlab.gnome.org/GNOME/gdm.git
# find . -name "gdm-smartcard*"
./data/pam-arch/gdm-smartcard.pam
./data/pam-redhat/gdm-smartcard.pam
./data/pam-exherbo/gdm-smartcard.pam
./data/pam-lfs/gdm-smartcard.pam
It seems like Ubuntu/Debian will have to start by having a 'compatible'
** Changed in: pam (Ubuntu Bionic)
Status: New => Invalid
** Changed in: pam (Ubuntu Focal)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
** Changed in: gdm3 (Ubuntu Groovy)
Importance: Medium => High
** Also affects: pam (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects: gdm3 (Ubuntu Focal)
Importance: Undecided
Status: New
** Also affects: pam (Ubuntu Bionic)
Importance: Undecided
** Changed in: gdm3 (Ubuntu Groovy)
Importance: Low => Medium
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard pam config needs to be updated
It has been brought to my attention by a UA customer that they are
suffering from which seems a similar situation:
"
Our only currently working SmartCard access from Linux, over SSSD, to AD, is on
RHEL7.
I was able to get SSH access on Ubuntu 20.04LTS, after adding
"ad_gpo_access_control =
** Also affects: pam (Ubuntu Groovy)
Importance: Undecided
Status: Invalid
** Also affects: gdm3 (Ubuntu Groovy)
Importance: Low
Assignee: Marco Trevisan (Treviño) (3v1n0)
Status: Confirmed
** Tags removed: rls-gg-incoming
--
You received this bug notification because
** Changed in: gdm3 (Ubuntu)
Assignee: (unassigned) => Marco Trevisan (Treviño) (3v1n0)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard pam
** Changed in: pam (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard pam config needs to be updated for
Dimitri, why is a bug task opened on pam? The description doesn't point
to this being a pam bug.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to pam in Ubuntu.
https://bugs.launchpad.net/bugs/1865226
Title:
gdm-smartcard
21 matches
Mail list logo
