<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.kde.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugs.kde.org/"
          
          maintainer="sysadmin@kde.org"
>

    <bug>
          <bug_id>490924</bug_id>
          
          <creation_ts>2024-07-28 13:30:44 +0000</creation_ts>
          <short_desc>The first password attempt is rejected after system wakes from sleep.</short_desc>
          <delta_ts>2026-08-10 17:52:31 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>10</classification_id>
          <classification>Unmaintained</classification>
          <product>kscreenlocker</product>
          <component>general</component>
          <version>unspecified</version>
          <rep_platform>Fedora RPMs</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>481808</dup_id>
          
          <bug_file_loc>https://github.com/sddm/sddm/issues/1941</bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>NOR</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Sophie Dexter">sophie.dexter74</reporter>
          <assigned_to name="Plasma Bugs List">plasma-bugs-null</assigned_to>
          <cc>alberto_bugzilla</cc>
    
    <cc>alex.sanchezstern</cc>
    
    <cc>alex765</cc>
    
    <cc>brokencanoe</cc>
    
    <cc>fabian</cc>
    
    <cc>firecatdan+kde</cc>
    
    <cc>germano.massullo</cc>
    
    <cc>kde.bugs</cc>
    
    <cc>kde</cc>
    
    <cc>kde</cc>
    
    <cc>mihirmishra</cc>
    
    <cc>nate</cc>
    
    <cc>navid.zamani+kde</cc>
    
    <cc>olib141</cc>
    
    <cc>pepko94</cc>
    
    <cc>qwertyuiop8350</cc>
    
    <cc>sam</cc>
    
    <cc>sergeyprotserovca</cc>
    
    <cc>xaver.hugl</cc>
          
          <cf_commitlink></cf_commitlink>
          <cf_versionfixedin></cf_versionfixedin>
          <cf_sentryurl></cf_sentryurl>
          <votes>0</votes>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2340779</commentid>
    <comment_count>0</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-07-28 13:30:44 +0000</bug_when>
    <thetext>SUMMARY

The first password attempt is rejected when I resume my system from sleep after it was put to sleep from the lock screen even though my password appears to be correct when I make it visible using the show password function. I am always able to log in on the second attempt. 

My system is unlocked as expected, i.e. without a rejected attempt, when I put my system to sleep using the application menu launcher&apos;s sleep icon or when unlocking without sleeping.

STEPS TO REPRODUCE
1. Wait for screen to lock automatically after a period of inactivity or lock with Meta-L key combination
2. Put system to sleep using the Sleep icon on the lock screen
3. Wake system and enter correct password to unlock

OBSERVED RESULT

My password is rejected the first time it is entered, the login screen shakes and an &apos;Unlocking failed&apos; message is shown.
I am able to login only when I enter my password a second time.

EXPECTED RESULT

The desktop should be unlocked the first time a correct password is entered.

SOFTWARE/OS VERSIONS

Linux/KDE Plasma: Fedora 40 - 6.9.10-200.fc40.x86_64
KDE Plasma Version: 6.1.3
KDE Frameworks Version: 6.4.0
Qt Version: 6.7.2

ADDITIONAL INFORMATION

I think this may have started when I upgraded my system from Fedora 39 to Fedora 40, but my journal logs only go back 3 months so I can&apos;t be sure, the oldest record from journalctl output I can find is from shortly after I upgraded:

May 01 06:32:09 Just4pLeisure kscreenlocker_greet[276611]: pam_unix(kde:auth): unexpected response from failed conversation function
May 01 06:32:09 Just4pLeisure kscreenlocker_greet[276611]: pam_unix(kde:auth): conversation failed
May 01 06:32:09 Just4pLeisure kscreenlocker_greet[276611]: pam_unix(kde:auth): auth could not identify password for [sophie]

The issue persists to this day despite numerous updates to Plasma, Frameworks and Qt:

Jul 27 17:39:35 Just4pLeisure kscreenlocker_greet[21299]: pam_unix(kde:auth): unexpected response from failed conversation function
Jul 27 17:39:35 Just4pLeisure kscreenlocker_greet[21299]: pam_unix(kde:auth): conversation failed
Jul 27 17:39:35 Just4pLeisure kscreenlocker_greet[21299]: pam_unix(kde:auth): auth could not identify password for [sophie]

Lee Head has submitted a complete journalctl log here :https://github.com/sddm/sddm/issues/1941#issuecomment-2156369683

Fabian Vogt (Vogtinator) suspects sleeping from the lock screen somehow triggers a broken PAM conversation: https://github.com/sddm/sddm/issues/1941#issuecomment-2254224974

I can supply log files as required and would love to try to debug this, although I may need a bit of guidance...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2340920</commentid>
    <comment_count>1</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-07-29 07:47:47 +0000</bug_when>
    <thetext>&gt; Fabian Vogt (Vogtinator) suspects sleeping from the lock screen somehow triggers a broken PAM conversation: https://github.com/sddm/sddm/issues/1941#issuecomment-2254224974

The difference is that for me unlocking after waking up works fine despite the broken PAM conversation.

If the broken PAM conversation is the cause, this should avoid it:

diff --git a/greeter/greeterapp.cpp b/greeter/greeterapp.cpp
index eb088cc..6c016cb 100644
--- a/greeter/greeterapp.cpp
+++ b/greeter/greeterapp.cpp
@@ -527,7 +527,6 @@ void UnlockApp::suspendToRam()
 
     m_ignoreRequests = true;
     m_resetRequestIgnoreTimer-&gt;start();
-    m_authenticators-&gt;cancel();
 
     PowerManagement::instance()-&gt;suspend();
 }

Probably not a proper fix though, at least the noninteractive authenticators running in the background should probably be stopped before suspending. Currently that&apos;s not guaranteed either though, it&apos;s all async.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2340985</commentid>
    <comment_count>2</comment_count>
    <who name="Zamundaaa">xaver.hugl</who>
    <bug_when>2024-07-29 13:30:42 +0000</bug_when>
    <thetext>Can confirm</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341052</commentid>
    <comment_count>3</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-07-29 16:35:58 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #1)
&gt; If the broken PAM conversation is the cause, this should avoid it:
&gt; 
&gt; diff --git a/greeter/greeterapp.cpp b/greeter/greeterapp.cpp
&gt; index eb088cc..6c016cb 100644
&gt; --- a/greeter/greeterapp.cpp
&gt; +++ b/greeter/greeterapp.cpp
&gt; @@ -527,7 +527,6 @@ void UnlockApp::suspendToRam()
&gt;  
&gt;      m_ignoreRequests = true;
&gt;      m_resetRequestIgnoreTimer-&gt;start();
&gt; -    m_authenticators-&gt;cancel();
&gt;  
&gt;      PowerManagement::instance()-&gt;suspend();
&gt;  }
Thank you Fabian, I have compiled kscreenlocker_greet with your patch and it resolves the rejected password issue for me :-)

&gt; Probably not a proper fix though, at least the noninteractive authenticators
&gt; running in the background should probably be stopped before suspending.
&gt; Currently that&apos;s not guaranteed either though, it&apos;s all async.
I understand at a very abstract level why you are concerned that this is a rough workaround but don&apos;t understand in any of the detail. With enough the time I&apos;d love to learn one day as I&apos;ve raised a few bug reports now and have graduated to the level of &apos;can compile with supplied patches&apos; :-D. Until I achieve my next badge (or 3) I&apos;ll have to leave a proper, or at least acceptable, fix to you as professionals. In the mean time I&apos;ll watch this bug report and test any developments too.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341073</commentid>
    <comment_count>4</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-07-29 17:41:55 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #3)
&gt; (In reply to Fabian Vogt from comment #1)
&gt; &gt; If the broken PAM conversation is the cause, this should avoid it:
&gt; &gt; 
&gt; &gt; diff --git a/greeter/greeterapp.cpp b/greeter/greeterapp.cpp
&gt; &gt; index eb088cc..6c016cb 100644
&gt; &gt; --- a/greeter/greeterapp.cpp
&gt; &gt; +++ b/greeter/greeterapp.cpp
&gt; &gt; @@ -527,7 +527,6 @@ void UnlockApp::suspendToRam()
&gt; &gt;  
&gt; &gt;      m_ignoreRequests = true;
&gt; &gt;      m_resetRequestIgnoreTimer-&gt;start();
&gt; &gt; -    m_authenticators-&gt;cancel();
&gt; &gt;  
&gt; &gt;      PowerManagement::instance()-&gt;suspend();
&gt; &gt;  }
&gt; Thank you Fabian, I have compiled kscreenlocker_greet with your patch and it
&gt; resolves the rejected password issue for me :-)

Great! Without this patch it should just start another PAM session after waking up,
when the UI becomes visible again. For some reason that does not work. Maybe
it&apos;s some kind of rate limit that gets tripped even beyond suspend/release. In that
case it would make sense to stop only the noninteractive authenticators. Not sure
how to find out though.

Another option could be that the authenticator isn&apos;t actually started properly again
after wakeup, as there is no fitting error message in the log.

It would be useful if you could run

QT_LOGGING_RULES=kscreenlocker_greet.debug=true /usr/libexec/kscreenlocker_greet --testing -platform xcb

and reproduce the issue. It&apos;s possible that the log contains some sensitive information,
so please read through it before uploading.

&gt; &gt; Probably not a proper fix though, at least the noninteractive authenticators
&gt; &gt; running in the background should probably be stopped before suspending.
&gt; &gt; Currently that&apos;s not guaranteed either though, it&apos;s all async.
&gt; I understand at a very abstract level why you are concerned that this is a
&gt; rough workaround but don&apos;t understand in any of the detail.

I don&apos;t know all details either - PAM is complex and very temperamental.

&gt; With enough the
&gt; time I&apos;d love to learn one day as I&apos;ve raised a few bug reports now and have
&gt; graduated to the level of &apos;can compile with supplied patches&apos; :-D. Until I
&gt; achieve my next badge (or 3) I&apos;ll have to leave a proper, or at least
&gt; acceptable, fix to you as professionals. In the mean time I&apos;ll watch this
&gt; bug report and test any developments too.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341317</commentid>
    <comment_count>5</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-07-30 14:15:36 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #4)
&gt; It would be useful if you could run
&gt; 
&gt; QT_LOGGING_RULES=kscreenlocker_greet.debug=true
&gt; /usr/libexec/kscreenlocker_greet --testing -platform xcb
&gt; 
&gt; and reproduce the issue.

Hmm, running that is proving to be tricky since this only occurs immediately after waking my system from sleep and I don&apos;t know how to do what you ask. I&apos;ve tried running from a different TTY but I am greeted with:

&gt;&gt; kscreenlocker_greet: Greeter is starting up.
&gt;&gt; qt.qpa.xcb: could not connect to display 
&gt;&gt; qt.qpa.plugin: From 6.5.0, xcb-cursor0 or libxcb-cursor0 is needed to load the Qt xcb platform plugin.
&gt;&gt; qt.qpa.plugin: Could not load the Qt platform plugin &quot;xcb&quot; in &quot;&quot; even though it was found.
&gt;&gt; This application failed to start because no Qt platform plugin could be initialized. Reinstalling the application may fix this problem.
&gt;&gt;
&gt;&gt; Available platform plugins are: wayland-egl, wayland, eglfs, linuxfb, minimal, minimalegl, offscreen, vkkhrdisplay, vnc, xcb.
Exporting DISPLAY=0 beforehand doesn&apos;t help. Thinking perhaps this is due to Fedora 40 being Wayland only I then tried wayland and wayland-egl instead of xcb. For reference, this is the output from running with --testing -platform wayland-egl (output is similar with -platform wayland option):
&gt;&gt; kscreenlocker_greet: Greeter is starting up.
&gt;&gt; qt.qpa.wayland: qtvirtualkeyboard currently is not supported at client-side, use QT_IM_MODULE=qtvirtualkeyboard at compositor-side.
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] start: successfully started
&gt;&gt; kscreenlocker_greet: Greeter is running in testing mode
&gt;&gt; kscreenlocker_greet: Testing mode enabled: true
&gt;&gt; kscreenlocker_greet: [PAM worker kde] start: successfully started
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] start: successfully started
&gt;&gt; kf.guiaddons: No modifierkeyinfo backend for platform &quot;wayland-egl&quot;
&gt;&gt; org.kde.plasma.keyboardindicator: Unknown key Qt::Key_CapsLock
&gt;&gt; kf.guiaddons: No modifierkeyinfo backend for platform &quot;wayland-egl&quot;
&gt;&gt; org.kde.plasma.keyboardindicator: Unknown key Qt::Key_CapsLock
&gt;&gt; kf.guiaddons: No modifierkeyinfo backend for platform &quot;wayland-egl&quot;
&gt;&gt; org.kde.plasma.keyboardindicator: Unknown key Qt::Key_CapsLock
&gt;&gt; Locked at 1722345401
&gt;&gt; kscreenlocker_greet: PamAuthenticators: starting authenticators
&gt;&gt; kscreenlocker_greet: PamAuthenticators: state changing from PamAuthenticators::Idle to PamAuthenticators::Authenticating
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Message: Info message: auth=authinfo_unavail
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Authenticate: Authentication done, result code: 9 (Authentication service cannot retrieve authentication info)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard true
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint true
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Info message from non-interactive authenticator kde-smartcard
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard false
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard false
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Message: Echo-off prompt: Password: 
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Starting nested event loop to await response
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Secret prompt from interactive authenticator kde
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] Authenticate: Authentication done, result code: 9 (Authentication service cannot retrieve authentication info)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint false
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint false
&gt;&gt; kscreenlocker_greet: PamAuthenticators: responding to interactive authenticator
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Received response, exiting nested event loop
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Authentication done, result code: 0 (Success)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Success from interactive authenticator kde
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked

Unfortunately though the &apos;kscreenlocker_greet --testing...&apos; instance is only visible after I&apos;ve unlocked my system and my first password attempt is rejected when actually unlocking. This is even though I run kscreenlocker --tesiting from a different, text only, TTY after waking my system. Because of this I haven&apos;t been able to reproduce so far with &apos;kscreenlocker_greet --testing...&apos; as I only see the broken conversation reports etc. after waking my system from sleep, but I cannot run the test until I&apos;ve unlocked - a chicken and egg conundrum I am yet to crack...

I suspect I&apos;ve missed something obvious and there is a way to run this immediately after waking my system from sleep to test kscreenlocker but I cannot fathom what, is there a way to simulate system sleeping and/or make the PAM conversation fail instead?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341335</commentid>
    <comment_count>6</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-07-30 15:44:34 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #5)
&gt; (In reply to Fabian Vogt from comment #4)
&gt; &gt; It would be useful if you could run
&gt; &gt; 
&gt; &gt; QT_LOGGING_RULES=kscreenlocker_greet.debug=true
&gt; &gt; /usr/libexec/kscreenlocker_greet --testing -platform xcb
&gt; &gt; 
&gt; &gt; and reproduce the issue.
&gt; 
&gt; Hmm, running that is proving to be tricky since this only occurs immediately
&gt; after waking my system from sleep and I don&apos;t know how to do what you ask.
&gt; I&apos;ve tried running from a different TTY but I am greeted with:

You should be able to run the command and try the sleep button.

&gt; ...
&gt; I suspect I&apos;ve missed something obvious and there is a way to run this
&gt; immediately after waking my system from sleep to test kscreenlocker but I
&gt; cannot fathom what, is there a way to simulate system sleeping and/or make
&gt; the PAM conversation fail instead?

It&apos;s also possible to &quot;fake&quot; the suspend by removing the call to PowerManagement::instance()-&gt;suspend(); instead of m_authenticators-&gt;cancel();</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341490</commentid>
    <comment_count>7</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-07-30 22:10:47 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #6)
&gt; You should be able to run the command and try the sleep button.
Ha! That was _embarassingly_ obvious :o) Unfortunately it wasn&apos;t much help however.  I se the testing lockscreen on waking my system which accepted my password first time, followed by the &apos;real&apos;  lockscreen which rejected my password before accepting... Qt logging messages  were similar to before.

But faking suspend with
&gt; It&apos;s also possible to &quot;fake&quot; the suspend by removing the call to
&gt; PowerManagement::instance()-&gt;suspend(); instead of
&gt; m_authenticators-&gt;cancel();
shows more promise and I see my password being rejected with lockscreen testing. I&apos;ve tried to annotate logged output, three messages in particular seem to indicate trouble:
&gt;&gt; kscreenlocker_greet: Greeter is starting up.
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] start: successfully started
&gt;&gt; kscreenlocker_greet: Greeter is running in testing mode
&gt;&gt; kscreenlocker_greet: Testing mode enabled: true
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] start: successfully started
&gt;&gt; kscreenlocker_greet: [PAM worker kde] start: successfully started
&gt;&gt; Locked at 1722370491
&gt;&gt; kscreenlocker_greet: PamAuthenticators: starting authenticators
&gt;&gt; kscreenlocker_greet: PamAuthenticators: state changing from PamAuthenticators::Idle to PamAuthenticators::Authenticating
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Authenticate: Starting authentication
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Message: Info message: auth=authinfo_unavail
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint true
&gt;&gt; kscreenlocker_greet: [PAM worker kde-smartcard] Authenticate: Authentication done, result code: 9 (Authentication service cannot retrieve authentication info)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard true
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Info message from non-interactive authenticator kde-smartcard
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard false
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-smartcard false
&gt;&gt; kscreenlocker_greet: [PAM worker kde-fingerprint] Authenticate: Authentication done, result code: 9 (Authentication service cannot retrieve authentication info)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint false
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Availability changed for non-interactive authenticator kde-fingerprint false
This relates to Password box before pressing (faked) sleep icon
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Message: Echo-off prompt: Password: 
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Starting nested event loop to await response
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Secret prompt from interactive authenticator kde
These three messages could be telling
&gt;&gt; kscreenlocker_greet: PamAuthenticators: cancelling interactive authenticator
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Received cancellation, exiting with PAM_CONV_ERR
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Nested event loop&apos;s exit code was not zero, bailing
This relates to the failing first password attempt after (faked) resume
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Message: Echo-off prompt: Password: 
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Starting nested event loop to await response
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Secret prompt from interactive authenticator kde
&gt;&gt; kscreenlocker_greet: PamAuthenticators: responding to interactive authenticator
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Received response, exiting nested event loop
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Authentication done, result code: 7 (Authentication failure)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Failure from interactive authenticator kde
&gt;&gt; kscreenlocker_greet: PamAuthenticators: state changing from PamAuthenticators::Authenticating to PamAuthenticators::Idle
&gt;&gt; kscreenlocker_greet: PamAuthenticators: starting authenticators
&gt;&gt; kscreenlocker_greet: PamAuthenticators: state changing from PamAuthenticators::Idle to PamAuthenticators::Authenticating
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Starting authentication
This relates to the 2nd password attempt which succeeds
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Message: Echo-off prompt: Password: 
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Starting nested event loop to await response
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Secret prompt from interactive authenticator kde
&gt;&gt; kscreenlocker_greet: PamAuthenticators: responding to interactive authenticator
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Received response, exiting nested event loop
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: [PAM worker kde] Authenticate: Authentication done, result code: 0 (Success)
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Interactive authenticator kde changed business
&gt;&gt; kscreenlocker_greet: PamAuthenticators: Success from interactive authenticator kde
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked
&gt;&gt; Unlocked</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2341560</commentid>
    <comment_count>8</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-07-31 07:39:16 +0000</bug_when>
    <thetext>Ok, that confirms it&apos;s indeed the PAM module refusing to authenticate. Question is why.

You could try creating /etc/pam_debug or adding debug to the pam_unix line in the kde pam module. Not sure where the debug output ends up though, might be in the journal or somewhere in /var/log/...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2342553</commentid>
    <comment_count>9</comment_count>
      <attachid>172221</attachid>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-02 16:40:25 +0000</bug_when>
    <thetext>Created attachment 172221
Messages reported by &apos;kscreenlocker_greet -testing&apos;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2342554</commentid>
    <comment_count>10</comment_count>
      <attachid>172222</attachid>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-02 16:41:36 +0000</bug_when>
    <thetext>Created attachment 172222
PAM debug messages during kscreenlocker_greet --testing</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2342556</commentid>
    <comment_count>11</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-02 16:43:06 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #8)
&gt; Ok, that confirms it&apos;s indeed the PAM module refusing to authenticate.
&gt; Question is why.
&gt; 
&gt; You could try creating /etc/pam_debug or adding debug to the pam_unix line
&gt; in the kde pam module. Not sure where the debug output ends up though, might
&gt; be in the journal or somewhere in /var/log/...
It took all of the above and a bit more, combining information from these two sources, debug messages appear in /var/log/debug.log (maybe not everything is needed):
https://www.ibm.com/docs/en/aix/7.3?topic=modules-enabling-pam-debug
https://help.duo.com/s/article/5095?language=en_US

/etc/pam.d/kde file doesn&apos;t include an entry for pam_unix.so but references password-auth which has multiple entries and I added &apos;debug&apos; to each entry. 

Unfortunately I don&apos;t really know how to decipher these dubug messages :-(</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343013</commentid>
    <comment_count>12</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-08-04 18:28:40 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #11)
&gt; (In reply to Fabian Vogt from comment #8)
&gt; &gt; Ok, that confirms it&apos;s indeed the PAM module refusing to authenticate.
&gt; &gt; Question is why.
&gt; &gt; 
&gt; &gt; You could try creating /etc/pam_debug or adding debug to the pam_unix line
&gt; &gt; in the kde pam module. Not sure where the debug output ends up though, might
&gt; &gt; be in the journal or somewhere in /var/log/...
&gt; It took all of the above and a bit more, combining information from these
&gt; two sources, debug messages appear in /var/log/debug.log (maybe not
&gt; everything is needed):
&gt; https://www.ibm.com/docs/en/aix/7.3?topic=modules-enabling-pam-debug
&gt; https://help.duo.com/s/article/5095?language=en_US
&gt; 
&gt; /etc/pam.d/kde file doesn&apos;t include an entry for pam_unix.so but references
&gt; password-auth which has multiple entries and I added &apos;debug&apos; to each entry. 
&gt; 
&gt; Unfortunately I don&apos;t really know how to decipher these dubug messages :-(

I don&apos;t see any new info in either of those logs unfortunately. What&apos;s the full content of both kde and password-auth PAM configs?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343166</commentid>
    <comment_count>13</comment_count>
      <attachid>172304</attachid>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 13:42:31 +0000</bug_when>
    <thetext>Created attachment 172304
/etc/pam.d/kde file</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343167</commentid>
    <comment_count>14</comment_count>
      <attachid>172305</attachid>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 13:44:12 +0000</bug_when>
    <thetext>Created attachment 172305
/etc/authselect/password-auth - sssd version</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343168</commentid>
    <comment_count>15</comment_count>
      <attachid>172306</attachid>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 13:45:28 +0000</bug_when>
    <thetext>Created attachment 172306
/etc/authselect/password-auth - local version</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343175</commentid>
    <comment_count>16</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 14:03:07 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #12)
&gt; I don&apos;t see any new info in either of those logs unfortunately. What&apos;s the
&gt; full content of both kde and password-auth PAM configs?

Files in attachments with 2 versions of &apos;password-auth&apos; file, one for the &apos;sssd&apos; profile, the other for the &apos;local&apos; profile.

I read Fedora Magazine&apos;s article on Fedora 40 migrating to the new &apos;local&apos; profile and noticed the default local profile does not include fingerprint readers which piqued my interest since the logs mention both fingerprint and smartcard readers, but I don&apos;t have either.

Long story short, I switched to authselect&apos;s local profile and the problem almost goes away... With the local profile I see the locks screen shake when I press the sleep button and my system then sleeps without any further action on my part. My password is accepted at the first attempt when I wake my system as it should be.

I do however still see broken PAM conversation errors in journalctl indicating this is not a true fix. If you are using authselect&apos;s local profile it may explain why you haven&apos;t noticed your password being rejected.

I&apos;d still like to track down the cause and help fix whatever the issue is :-)</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343176</commentid>
    <comment_count>17</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 14:05:43 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #16)
Just to add, fingerprint readers do not seem to be the issue since en/disabling their use through authselect makes no difference</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343241</commentid>
    <comment_count>18</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-08-05 17:37:26 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #16)
&gt; (In reply to Fabian Vogt from comment #12)
&gt; &gt; I don&apos;t see any new info in either of those logs unfortunately. What&apos;s the
&gt; &gt; full content of both kde and password-auth PAM configs?
&gt; 
&gt; Files in attachments with 2 versions of &apos;password-auth&apos; file, one for the
&gt; &apos;sssd&apos; profile, the other for the &apos;local&apos; profile.
&gt; 
&gt; I read Fedora Magazine&apos;s article on Fedora 40 migrating to the new &apos;local&apos;
&gt; profile and noticed the default local profile does not include fingerprint
&gt; readers which piqued my interest since the logs mention both fingerprint and
&gt; smartcard readers, but I don&apos;t have either.
&gt; 
&gt; Long story short, I switched to authselect&apos;s local profile and the problem
&gt; almost goes away... With the local profile I see the locks screen shake when
&gt; I press the sleep button and my system then sleeps without any further
&gt; action on my part. My password is accepted at the first attempt when I wake
&gt; my system as it should be.

Perfect! That means the cause is most likely pam_sss.

&gt; I do however still see broken PAM conversation errors in journalctl
&gt; indicating this is not a true fix.

That&apos;s expected, the code sends PAM_CONV_ERR when suspending. That&apos;s what
the diff in comment #1 commented out.

&gt; If you are using authselect&apos;s local
&gt; profile it may explain why you haven&apos;t noticed your password being rejected.
&gt;
&gt; I&apos;d still like to track down the cause and help fix whatever the issue is :-)

Me too.

Can you please try this (with the working local config as base):

&quot;auth        sufficient                                   pam_sss.so forward_pass&quot;

after pam_unix (this should bring the issue back) and then

&quot;auth        sufficient                                   pam_sss.so use_first_pass&quot;

instead? I wonder whether that avoids the issue as well. Please keep a local root shell open when editing PAM config.

If this works, the PAM_CONV_ERR return does not fully quit the PAM stack and it just gets stuck at pam_sss.
The fix would be to return PAM_CONV_ERR until pam_authenticate returns failure.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2343387</commentid>
    <comment_count>19</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-05 21:39:50 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #18)
&gt; Can you please try this (with the working local config as base):
&gt; 
&gt; &quot;auth        sufficient                                   pam_sss.so
&gt; forward_pass&quot;
&gt; 
&gt; after pam_unix (this should bring the issue back) and then
Yes it did!
&gt; 
&gt; &quot;auth        sufficient                                   pam_sss.so
&gt; use_first_pass&quot;
&gt; 
&gt; instead? I wonder whether that avoids the issue as well. Please keep a local
&gt; root shell open when editing PAM config.
and, yes it did :-) 
I used &apos;sudo vi /etc/authselect/password-auth&apos; when editing, unsure what I was supposed to do/see with the root  shell though,? 
&gt; If this works, the PAM_CONV_ERR return does not fully quit the PAM stack and
&gt; it just gets stuck at pam_sss.
&gt; The fix would be to return PAM_CONV_ERR until pam_authenticate returns
&gt; failure.
Great!, umm, how :?:</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2346938</commentid>
    <comment_count>20</comment_count>
    <who name="Bug Janitor Service">bug-janitor</who>
    <bug_when>2024-08-20 03:47:31 +0000</bug_when>
    <thetext>🐛🧹 ⚠️ This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information, then set the bug status to REPORTED. If there is no change for at least 30 days, it will be automatically closed as RESOLVED WORKSFORME.

For more information about our bug triaging procedures, please read https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging.

Thank you for helping us make KDE software even better for everyone!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2346957</commentid>
    <comment_count>21</comment_count>
    <who name="Rob Sterenborg">kde</who>
    <bug_when>2024-08-20 06:01:26 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #19)
&gt; (In reply to Fabian Vogt from comment #18)
&gt; &gt; Can you please try this (with the working local config as base):
&gt; &gt; 
&gt; &gt; &quot;auth        sufficient                                   pam_sss.so
&gt; &gt; forward_pass&quot;
&gt; &gt; 
&gt; &gt; after pam_unix (this should bring the issue back) and then
&gt; Yes it did!
&gt; &gt; 
&gt; &gt; &quot;auth        sufficient                                   pam_sss.so
&gt; &gt; use_first_pass&quot;
&gt; &gt; 
&gt; &gt; instead? I wonder whether that avoids the issue as well. Please keep a local
&gt; &gt; root shell open when editing PAM config.
&gt; and, yes it did :-) 
&gt; I used &apos;sudo vi /etc/authselect/password-auth&apos; when editing, unsure what I
&gt; was supposed to do/see with the root  shell though,?

The (extra) open root shell would have enabled you to use it to fix the PAM configuration in case you made a mistake, making you unable to login.

&gt; &gt; If this works, the PAM_CONV_ERR return does not fully quit the PAM stack and
&gt; &gt; it just gets stuck at pam_sss.
&gt; &gt; The fix would be to return PAM_CONV_ERR until pam_authenticate returns
&gt; &gt; failure.
&gt; Great!, umm, how :?:

I don&apos;t think that&apos;s for you or me to fix: this PAM config change fixed the issue for me as well (it&apos;s probably not the right fix, but it works for now), and I don&apos;t see what more info you can give.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2348481</commentid>
    <comment_count>22</comment_count>
    <who name="Bug Janitor Service">bug-janitor</who>
    <bug_when>2024-08-25 09:38:28 +0000</bug_when>
    <thetext>A possibly relevant merge request was started @ https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/240</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2348482</commentid>
    <comment_count>23</comment_count>
    <who name="Fabian Vogt">fabian</who>
    <bug_when>2024-08-25 09:41:38 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #19)
&gt; (In reply to Fabian Vogt from comment #18)
&gt; &gt; Can you please try this (with the working local config as base):
&gt; &gt; 
&gt; &gt; &quot;auth        sufficient                                   pam_sss.so
&gt; &gt; forward_pass&quot;
&gt; &gt; 
&gt; &gt; after pam_unix (this should bring the issue back) and then
&gt; Yes it did!
&gt; &gt; 
&gt; &gt; &quot;auth        sufficient                                   pam_sss.so
&gt; &gt; use_first_pass&quot;
&gt; &gt; 
&gt; &gt; instead? I wonder whether that avoids the issue as well. Please keep a local
&gt; &gt; root shell open when editing PAM config.
&gt; and, yes it did :-) 
&gt; I used &apos;sudo vi /etc/authselect/password-auth&apos; when editing, unsure what I
&gt; was supposed to do/see with the root  shell though,?
&gt; &gt; If this works, the PAM_CONV_ERR return does not fully quit the PAM stack and
&gt; &gt; it just gets stuck at pam_sss.
&gt; &gt; The fix would be to return PAM_CONV_ERR until pam_authenticate returns
&gt; &gt; failure.
&gt; Great!, umm, how :?:

Like this: https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/240
Can you please check whether this MR fixes the issue for you?

(In reply to Rob Sterenborg from comment #21)
&gt; (In reply to Sophie Dexter from comment #19)
&gt; &gt; (In reply to Fabian Vogt from comment #18)
&gt; &gt; &gt; instead? I wonder whether that avoids the issue as well. Please keep a local
&gt; &gt; &gt; root shell open when editing PAM config.
&gt; &gt; and, yes it did :-) 
&gt; &gt; I used &apos;sudo vi /etc/authselect/password-auth&apos; when editing, unsure what I
&gt; &gt; was supposed to do/see with the root  shell though,?
&gt; 
&gt; The (extra) open root shell would have enabled you to use it to fix the PAM
&gt; configuration in case you made a mistake, making you unable to login.

Exactly that! password-auth is likely used by all authentication methods (tty + graphical login, ssh), so if there&apos;s a typo or other issue you&apos;d lock yourself out of your system.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2348645</commentid>
    <comment_count>24</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-25 21:26:09 +0000</bug_when>
    <thetext>(In reply to Fabian Vogt from comment #23)
&gt; (In reply to Sophie Dexter from comment #19)
&gt; &gt; (In reply to Fabian Vogt from comment #18)
&gt; &gt; &gt; I used &apos;sudo vi /etc/authselect/password-auth&apos; when editing, unsure what I
&gt; &gt; &gt; was supposed to do/see with the root  shell though,?
&gt; &gt; 
&gt; &gt; The (extra) open root shell would have enabled you to use it to fix the PAM
&gt; &gt; configuration in case you made a mistake, making you unable to login.
&gt; 
&gt; Exactly that! password-auth is likely used by all authentication methods
&gt; (tty + graphical login, ssh), so if there&apos;s a typo or other issue you&apos;d lock
&gt; yourself out of your system.
Understood! - I did have a TTY3 session logged in with my normal user account but I now realise that may not have been enough if I needed root access but had &apos;broken&apos; my PAM configuration. Thank you both for explaining :-)

(In reply to Fabian Vogt from comment #23)
&gt; (In reply to Sophie Dexter from comment #19)
&gt; &gt; (In reply to Fabian Vogt from comment #18)
&gt; &gt; &gt; The fix would be to return PAM_CONV_ERR until pam_authenticate returns
&gt; &gt; &gt; failure.
&gt; &gt; Great!, umm, how :?:
&gt; 
&gt; Like this: https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/240
&gt; Can you please check whether this MR fixes the issue for you?
&gt; 
Unfortunately not really, but behaviour is different:
The lock screen almost works with authselect &apos;local&apos; profile with the peculiarity that the lock screen shakes and informs &apos;Unlocking Failed&apos; then sleeps after that message&apos;s timeout expires.

However, with authselect&apos;s &apos;sssd&apos; profile I have to press the sleep button twice before my system will sleep. I see the screen shake and an &apos;Unlocking Failed&apos;  message each time I press sleep.

The better news is that unlocking works at the first attempt with either profile.

the plot thickens...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2348749</commentid>
    <comment_count>25</comment_count>
    <who name="Sophie Dexter">sophie.dexter74</who>
    <bug_when>2024-08-26 09:02:11 +0000</bug_when>
    <thetext>(In reply to Sophie Dexter from comment #24)
&gt; However, with authselect&apos;s &apos;sssd&apos; profile I have to press the sleep button
&gt; twice before my system will sleep. I see the screen shake and an &apos;Unlocking
&gt; Failed&apos;  message each time I press sleep.
&gt; 
Update - behaviour with authselect&apos;s sssd profile is variable - I initially thought that I had to press the sleep button twice but I was impatient as my system does always seem to sleep after the first press sometimes immediately after the lockscreen shakes and protests &apos;Unlocking Failed&apos; but sometimes not for a few 10s of seconds if I wait...</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2352698</commentid>
    <comment_count>26</comment_count>
    <who name="Bug Janitor Service">bug-janitor</who>
    <bug_when>2024-09-10 03:46:57 +0000</bug_when>
    <thetext>🐛🧹 ⚠️ This bug has been in NEEDSINFO status with no change for at least 15 days. Please provide the requested information, then set the bug status to REPORTED. If there is no change for at least 30 days, it will be automatically closed as RESOLVED WORKSFORME.

For more information about our bug triaging procedures, please read https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging.

Thank you for helping us make KDE software even better for everyone!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2359630</commentid>
    <comment_count>27</comment_count>
    <who name="Bug Janitor Service">bug-janitor</who>
    <bug_when>2024-09-25 03:47:14 +0000</bug_when>
    <thetext>🐛🧹 This bug has been in NEEDSINFO status with no change for at least 30 days. Closing as RESOLVED WORKSFORME.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2453703</commentid>
    <comment_count>28</comment_count>
    <who name="Alex">alex765</who>
    <bug_when>2025-09-10 09:47:13 +0000</bug_when>
    <thetext>I still encounter this one on Fedora 42 KDE Edition (Plasma 6.4.4, Frameworks 6.17.0, Qt 6.9.1). I&apos;m assuming its the same issue since the symptoms are the exact same and I&apos;m also on Fedora (same as OP).

It doesn&apos;t seem like the bug was fixed and I&apos;m able to reproduce with the given steps, so I&apos;m going to re-open this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2460397</commentid>
    <comment_count>29</comment_count>
    <who name="Germano Massullo (Thetra)">germano.massullo</who>
    <bug_when>2025-10-08 13:38:02 +0000</bug_when>
    <thetext>Confirming on several different machines on Plasma 6.4.5 on Fedora 42</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2460877</commentid>
    <comment_count>30</comment_count>
    <who name="Rob Sterenborg">kde</who>
    <bug_when>2025-10-10 09:24:19 +0000</bug_when>
    <thetext>(In reply to Alex from comment #28)
&gt; I still encounter this one on Fedora 42 KDE Edition (Plasma 6.4.4,
&gt; Frameworks 6.17.0, Qt 6.9.1). I&apos;m assuming its the same issue since the
&gt; symptoms are the exact same and I&apos;m also on Fedora (same as OP).
&gt; 
&gt; It doesn&apos;t seem like the bug was fixed and I&apos;m able to reproduce with the
&gt; given steps, so I&apos;m going to re-open this.

I have several F42 KDE Edition installs. Currently, none of them exhibit this problem which I too experienced in the past, and is what led me to this bug. I still don&apos;t know exactly why it happened, and why it doesn&apos;t happen with the installs that I currently have. This is annoying, because it means it can start happening again at any time.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2473695</commentid>
    <comment_count>31</comment_count>
    <who name="Tom">tgreen894</who>
    <bug_when>2025-11-30 17:03:01 +0000</bug_when>
    <thetext>I am also encountering this error. I am able to reproduce it with the steps posted by Sophie, as well as whenever my computer sleeps by any other method.

Operating System: Fedora Linux 43
KDE Plasma Version: 6.5.3
KDE Frameworks Version: 6.20.0
Qt Version: 6.10.1
Kernel Version: 6.17.8-300.fc43.x86_64 (64-bit)
Graphics Platform: Wayland</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2478750</commentid>
    <comment_count>32</comment_count>
    <who name="">sergeyprotserovca</who>
    <bug_when>2025-12-22 15:51:40 +0000</bug_when>
    <thetext>Can reproduce with:

Operating System: Fedora Linux 42
KDE Plasma Version: 6.5.4
KDE Frameworks Version: 6.21.0
Qt Version: 6.9.3

In my case it manifested in a way that whenever I exit suspend initiated by closing the laptop lid (never checked with other means of entering suspend), I immediately get a shaking screen and a &quot;Login failed&quot; message even without pressing anything.

I read through this discussion, and it seems like the issue is in interaction between KScreenLocker, PAM and SSSD. Since I don&apos;t use SSSD at all, I just removed all the SSSD-related packages from the system, and I don&apos;t observe the issue any more.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2495747</commentid>
    <comment_count>33</comment_count>
    <who name="">navid.zamani+kde</who>
    <bug_when>2026-02-18 13:26:23 +0000</bug_when>
    <thetext>I can confirm this bug as well.
Drives me up the wall, since I thought I was always mistyping it somehow. But it’s not me!!
I used the macro function of my keyboard to verify that it’s definitely not a mistyped password.
And it’s shocking that this still exists after 1.5 years, given how angering this is.

Operating System: Gentoo GNU/Linux 2026-02-12
KDE Plasma Version: 6.5.5
KDE Frameworks Version: 6.23.0
Qt Version: 6.10.2
Kernel Version: 6.18.8-gentoo-dist (64-bit)
Graphics Platform: X11 21.1.21
PAM Version: 1.7.2</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2524843</commentid>
    <comment_count>34</comment_count>
    <who name="Canoe">brokencanoe</who>
    <bug_when>2026-06-19 19:35:23 +0000</bug_when>
    <thetext>Still an issue in 6.7.0 : Let your screen go to sleep, type in password, first entry rejected. 
: 
Operating System: EndeavourOS 
KDE Plasma Version: 6.7.0
KDE Frameworks Version: 6.27.0
Qt Version: 6.11.1
Kernel Version: 7.0.12-arch1-1 (64-bit)
Graphics Platform: Wayland</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2528514</commentid>
    <comment_count>35</comment_count>
    <who name="Alex Sanchez-Stern">alex.sanchezstern</who>
    <bug_when>2026-06-30 23:54:31 +0000</bug_when>
    <thetext>I hit this issue (or at least a related issue) on Arch with a plain pam_unix stack (no SSSD, no fingerprint/smartcard hardware). The visible symptom on my end is the lock screen showing a failed attempt on wake, without me ever having typed anything. But as far as I can tell its the same root cause event from here: m_authenticator-&gt;cancel() on suspend leading to a PAM_CONV_ERR.

It looks like pre-6.7, this could only happen when you hit the sleep/suspend button on the lock screen, sending the cancel. But as of the 6.7.0 release (specifically 9e622c8676fa), some of the &quot;suspend from lid close&quot; logic was merged into the same sleep/suspend button logic, so closing the lid while the password prompt is up sends the PAM cancel, which gets mis-classified as a failed password attempt, causing the failed login attempt and delay before another password attempt. This, I believe, makes this bad behavior *much* more common; on some laptops just being jostled around can cause lid open and close events in rapid succession, triggering the bug on the first real wake.

MR 240 doesn&apos;t appear to actually fix the issue, because in my case PAM_CONV_ERR *is* already being returned, but the problem is that it doesn&apos;t get handled any differently than a password failure, hence the password failure. The fix should be to add a special path for cancelled authentication attempts as opposed to failed ones.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2528939</commentid>
    <comment_count>36</comment_count>
    <who name="Alex Sanchez-Stern">alex.sanchezstern</who>
    <bug_when>2026-07-02 21:51:14 +0000</bug_when>
    <thetext>Here&apos;s the MR that fixes it for me, I think it&apos;ll fix it for everyone else on here? Basically just makes it so sleeping the computer while on the lock screen doesn&apos;t send a &quot;cancel auth&quot; message, which gets misinterpreted as an &quot;auth failed&quot; message, and instead just leaves the auth attempt open for when it wakes up.
https://invent.kde.org/plasma/kscreenlocker/-/merge_requests/340</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2530194</commentid>
    <comment_count>37</comment_count>
    <who name="walnut">qwertyuiop8350</who>
    <bug_when>2026-07-08 16:53:47 +0000</bug_when>
    <thetext>On Fedora 44 + Plasma 6.7.2 + Wayland, after resume from suspend, Unlocking failed is shown automatically before any keyboard or mouse input. The journal contains pam_unix(kde:auth): conversation failed and auth could not identify password. This happens every time. My computer is Lenovo Thinkbook 14+ 2025 Ultra9-285H.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2531523</commentid>
    <comment_count>38</comment_count>
    <who name="Robin Bankhead">kde.bugs</who>
    <bug_when>2026-07-14 08:52:36 +0000</bug_when>
    <thetext>(In reply to walnut from comment #37)
&gt; On Fedora 44 + Plasma 6.7.2 + Wayland, after resume from suspend, Unlocking
&gt; failed is shown automatically before any keyboard or mouse input. The
&gt; journal contains pam_unix(kde:auth): conversation failed and auth could not
&gt; identify password. This happens every time. My computer is Lenovo Thinkbook
&gt; 14+ 2025 Ultra9-285H.

Same, on Gentoo (OpenRC) / plasma-6.7.2 / Wayland session. &quot;Unlocking failed&quot;, earthquake and timeout, immediately when screen activates after sleep. Thinkpad X270. Homedir on LUKS mounted using pam_mount, all other pam config as distro defaults.

Will see about some debug output when I have a bit of time to do so.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2532535</commentid>
    <comment_count>39</comment_count>
    <who name="Flame Soulis">firecatdan+kde</who>
    <bug_when>2026-07-17 21:27:36 +0000</bug_when>
    <thetext>Can confirm the same with EndeavourOS, and can confirm my fingerprint reader was configured prior to updating KDE.

Operating System: EndeavourOS 
KDE Plasma Version: 6.7.3
KDE Frameworks Version: 6.28.0
Qt Version: 6.11.1
Kernel Version: 6.18.38-3-lts (64-bit)
Graphics Platform: Wayland
System Version: ThinkPad L13 Yoga Gen 4</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2533239</commentid>
    <comment_count>40</comment_count>
    <who name="Oliver Beard">olib141</who>
    <bug_when>2026-07-21 10:38:01 +0000</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 481808 ***</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2537936</commentid>
    <comment_count>41</comment_count>
    <who name="Hinokami Dev">mihirmishra</who>
    <bug_when>2026-08-10 17:52:31 +0000</bug_when>
    <thetext>## Summary

I am experiencing what appears to be the same KScreenLocker/PAM suspend-resume issue described in this bug.

When my system is locked and then suspended, KScreenLocker reports a failed authentication immediately after resume, even though I have not entered my password at all. The lock screen shakes and displays **&quot;Unlocking failed&quot;** automatically.

### Steps to reproduce

1. Lock the system using `Meta+L`.
2. Leave the system locked until it goes to sleep/suspend automatically.
3. Wake the system using the power button on the keyboard.
4. Observe the lock screen before entering any password.

### Observed behavior

Immediately after waking:

* The lock screen shakes as if an incorrect password was entered.
* **&quot;Unlocking failed&quot;** is displayed.
* No password has been entered.
* After this automatic failure, entering the correct password works normally.

I can also reproduce the issue when using the **Sleep** button directly from the lock screen.

### Expected behavior

After resuming from suspend, the lock screen should simply wait for my password. It should not report a failed authentication when no authentication attempt was made.

### System information

* Fedora Linux 44
* KDE Plasma 6.7.4
* KDE Frameworks: [please add output]
* KScreenLocker: `6.7.4-1.fc44`
* Qt: [please add output]
* Kernel: [please add output]
* Graphics platform: Wayland
* PAM: `1.7.2-2.fc44`
* Architecture: x86_64

### Additional information

This is not simply an incorrect-password issue. The failure occurs automatically immediately after resume, before I enter anything.

If I lock the system and unlock it without suspending, the password is accepted normally. The problem is specifically associated with suspend/resume while the system is locked.

I found an existing KDE bug discussing very similar behavior, including `PAM_CONV_ERR` and cancellation of the PAM authentication conversation when suspending from the lock screen. The discussion also references MR 340 as a possible fix.

I am reporting this because the issue still appears to be reproducible on Fedora 44 with KScreenLocker 6.7.4.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>172221</attachid>
            <date>2024-08-02 16:40:25 +0000</date>
            <delta_ts>2024-08-02 16:40:25 +0000</delta_ts>
            <desc>Messages reported by &apos;kscreenlocker_greet -testing&apos;</desc>
            <filename>kscreenlocker_test.log</filename>
            <type>text/plain</type>
            <size>4543</size>
            <attacher name="Sophie Dexter">sophie.dexter74</attacher>
            
              <data encoding="base64">a3NjcmVlbmxvY2tlcl9ncmVldDogR3JlZXRlciBpcyBzdGFydGluZyB1cC4Ka3NjcmVlbmxvY2tl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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>172222</attachid>
            <date>2024-08-02 16:41:36 +0000</date>
            <delta_ts>2024-08-02 16:41:36 +0000</delta_ts>
            <desc>PAM debug messages during kscreenlocker_greet --testing</desc>
            <filename>debug.log</filename>
            <type>text/plain</type>
            <size>13457</size>
            <attacher name="Sophie Dexter">sophie.dexter74</attacher>
            
              <data encoding="base64">QXVnICAyIDE3OjA4OjM4IEp1c3Q0cExlaXN1cmUgYXVkaXRbNzM5MzFdOiBVU0VSX0FDQ1QgcGlk
PTczOTMxIHVpZD0xMDAwIGF1aWQ9MTAwMCBzZXM9MyBzdWJqPXVuY29uZmluZWRfdTp1bmNvbmZp
bmVkX3I6dW5jb25maW5lZF90OnMwLXMwOmMwLmMxMDIzIG1zZz0nb3A9UEFNOmFjY291bnRpbmcg
Z3JhbnRvcnM9cGFtX3VuaXgscGFtX2xvY2FsdXNlciBhY2N0PSJzb3BoaWUiIGV4ZT0iL3Vzci9i
aW4vc3VkbyIgaG9zdG5hbWU9PyBhZGRyPT8gdGVybWluYWw9L2Rldi9wdHMvNyByZXM9c3VjY2Vz
cycKQXVnICAyIDE3OjA4OjM4IEp1c3Q0cExlaXN1cmUgc3Vkb1s3MzkzMV06ICBzb3BoaWUgOiBU
VFk9cHRzLzcgOyBQV0Q9L2hvbWUvc29waGllL0RvY3VtZW50cy9CdWdfcmVwb3J0cy9rZGUvNDkw
OTI0LWZpcnN0LXBhc3N3b3JkLXJlamVjdGVkIDsgVVNFUj1yb290IDsgQ09NTUFORD0vdXNyL2Jp
bi90cnVuY2F0ZSAtcyAwIC92YXIvbG9nL2RlYnVnLmxvZwpBdWcgIDIgMTc6MDg6MzggSnVzdDRw
TGVpc3VyZSBhdWRpdFs3MzkzMV06IFVTRVJfQ01EIHBpZD03MzkzMSB1aWQ9MTAwMCBhdWlkPTEw
MDAgc2VzPTMgc3Viaj11bmNvbmZpbmVkX3U6dW5jb25maW5lZF9yOnVuY29uZmluZWRfdDpzMC1z
MDpjMC5jMTAyMyBtc2c9J2N3ZD0iL2hvbWUvc29waGllL0RvY3VtZW50cy9CdWdfcmVwb3J0cy9r
ZGUvNDkwOTI0LWZpcnN0LXBhc3N3b3JkLXJlamVjdGVkIiBjbWQ9NzQ3Mjc1NkU2MzYxNzQ2NTIw
MkQ3MzIwMzAyMDJGNzY2MTcyMkY2QzZGNjcyRjY0NjU2Mjc1NjcyRTZDNkY2NyBleGU9Ii91c3Iv
YmluL3N1ZG8iIHRlcm1pbmFsPXB0cy83IHJlcz1zdWNjZXNzJwpBdWcgIDIgMTc6MDg6MzggSnVz
dDRwTGVpc3VyZSBhdWRpdFs3MzkzMV06IENSRURfUkVGUiBwaWQ9NzM5MzEgdWlkPTEwMDAgYXVp
ZD0xMDAwIHNlcz0zIHN1Ymo9dW5jb25maW5lZF91OnVuY29uZmluZWRfcjp1bmNvbmZpbmVkX3Q6
czAtczA6YzAuYzEwMjMgbXNnPSdvcD1QQU06c2V0Y3JlZCBncmFudG9ycz1wYW1fZW52LHBhbV9m
cHJpbnRkIGFjY3Q9InJvb3QiIGV4ZT0iL3Vzci9iaW4vc3VkbyIgaG9zdG5hbWU9PyBhZGRyPT8g
dGVybWluYWw9L2Rldi9wdHMvNyByZXM9c3VjY2VzcycKQXVnICAyIDE3OjA4OjM4IEp1c3Q0cExl
aXN1cmUgc3Vkb1s3MzkzMV06IHBhbV91bml4KHN1ZG86c2Vzc2lvbik6IHNlc3Npb24gb3BlbmVk
IGZvciB1c2VyIHJvb3QodWlkPTApIGJ5IHNvcGhpZSh1aWQ9MTAwMCkKQXVnICAyIDE3OjA4OjM4
IEp1c3Q0cExlaXN1cmUgYXVkaXRbNzM5MzFdOiBVU0VSX1NUQVJUIHBpZD03MzkzMSB1aWQ9MTAw
MCBhdWlkPTEwMDAgc2VzPTMgc3Viaj11bmNvbmZpbmVkX3U6dW5jb25maW5lZF9yOnVuY29uZmlu
ZWRfdDpzMC1zMDpjMC5jMTAyMyBtc2c9J29wPVBBTTpzZXNzaW9uX29wZW4gZ3JhbnRvcnM9cGFt
X2tleWluaXQscGFtX2xpbWl0cyxwYW1fa2V5aW5pdCxwYW1fbGltaXRzLHBhbV9zeXN0ZW1kLHBh
bV91bml4IGFjY3Q9InJvb3QiIGV4ZT0iL3Vzci9iaW4vc3VkbyIgaG9zdG5hbWU9PyBhZGRyPT8g
dGVybWluYWw9L2Rldi9wdHMvNyByZXM9c3VjY2VzcycKQXVnICAyIDE3OjA4OjM4IEp1c3Q0cExl
aXN1cmUgc3Vkb1s3MzkzMV06IHBhbV91bml4KHN1ZG86c2Vzc2lvbik6IHNlc3Npb24gY2xvc2Vk
IGZvciB1c2VyIHJvb3QKQXVnICAyIDE3OjA4OjM4IEp1c3Q0cExlaXN1cmUgYXVkaXRbNzM5MzFd
OiBVU0VSX0VORCBwaWQ9NzM5MzEgdWlkPTEwMDAgYXVpZD0xMDAwIHNlcz0zIHN1Ymo9dW5jb25m
aW5lZF91OnVuY29uZmluZWRfcjp1bmNvbmZpbmVkX3Q6czAtczA6YzAuYzEwMjMgbXNnPSdvcD1Q
QU06c2Vzc2lvbl9jbG9zZSBncmFudG9ycz1wYW1fa2V5aW5pdCxwYW1fbGltaXRzLHBhbV9rZXlp
bml0LHBhbV9saW1pdHMscGFtX3N5c3RlbWQscGFtX3VuaXggYWNjdD0icm9vdCIgZXhlPSIvdXNy
L2Jpbi9zdWRvIiBob3N0bmFtZT0/IGFkZHI9PyB0ZXJtaW5hbD0vZGV2L3B0cy83IHJlcz1zdWNj
ZXNzJwpBdWcgIDIgMTc6MDg6MzggSnVzdDRwTGVpc3VyZSBhdWRpdFs3MzkzMV06IENSRURfRElT
UCBwaWQ9NzM5MzEgdWlkPTEwMDAgYXVpZD0xMDAwIHNlcz0zIHN1Ymo9dW5jb25maW5lZF91OnVu
Y29uZmluZWRfcjp1bmNvbmZpbmVkX3Q6czAtczA6YzAuYzEwMjMgbXNnPSdvcD1QQU06c2V0Y3Jl
ZCBncmFudG9ycz1wYW1fZW52LHBhbV9mcHJpbnRkIGFjY3Q9InJvb3QiIGV4ZT0iL3Vzci9iaW4v
c3VkbyIgaG9zdG5hbWU9PyBhZGRyPT8gdGVybWluYWw9L2Rldi9wdHMvNyByZXM9c3VjY2VzcycK
QXVnICAyIDE3OjA4OjQzIEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29t
cF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0MyBKdXN0NHBMZWlz
dXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lw
cGluZwpBdWcgIDIgMTc6MDg6NDMgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxl
ciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQzIEp1c3Q0
cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHks
IHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2No
ZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQg
SnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5vdCBy
ZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJt
XSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzow
ODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEgaXMg
bm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6
IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAy
IDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMu
MCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtl
cm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpB
dWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21w
XzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1
cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBw
aW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVy
IGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRw
TGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwg
c2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hl
ZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBK
dXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJl
YWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1d
IHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4
OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBu
b3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDog
W2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIg
MTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4x
IGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2Vy
bmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1
ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBf
MS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3Vy
ZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBp
bmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIg
Y29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBM
ZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBz
a2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVk
dWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1
c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVh
ZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0g
c2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6
NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5v
dCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBb
ZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAx
NzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEg
aXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJu
ZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVn
ICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8x
LjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJl
IGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGlu
ZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBj
b21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExl
aXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNr
aXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1
bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVz
dDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFk
eSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBz
Y2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0
NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90
IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtk
cm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3
OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBp
cyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5l
bDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcg
IDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEu
My4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUg
a2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5n
CkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNv
bXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVp
c3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tp
cHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVs
ZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0
NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5
LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNj
aGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0
IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3Qg
cmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2Ry
bV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6
MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlz
IG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVs
OiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAg
MiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4y
LjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBr
ZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcK
QXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29t
cF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlz
dXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lw
cGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxl
ciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0
cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHks
IHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2No
ZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQg
SnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCBy
ZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJt
XSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzow
ODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMg
bm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6
IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAy
IDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAu
MSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtl
cm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpB
dWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21w
XzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1
cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBw
aW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVy
IGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRw
TGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwg
c2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hl
ZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBK
dXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJl
YWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1d
IHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4
OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBu
b3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDog
W2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIg
MTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4w
IGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2Vy
bmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1
ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBf
MS4yLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3Vy
ZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBp
bmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIg
Y29tcF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBM
ZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBz
a2lwcGluZwpBdWcgIDIgMTc6MDg6NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVk
dWxlciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1
c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVh
ZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NCBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0g
c2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6
NDQgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5v
dCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ0IEp1c3Q0cExlaXN1cmUga2VybmVsOiBb
ZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAx
NzowODo0NSBKdXN0NHBMZWlzdXJlIGtzY3JlZW5sb2NrZXJfZ3JlZXRbNzM5NDRdOiBwYW1fdW5p
eChrZGU6YXV0aCk6IHVzZXJuYW1lIFtzb3BoaWVdIG9idGFpbmVkCkF1ZyAgMiAxNzowODo0NSBK
dXN0NHBMZWlzdXJlIGF1ZGl0OiBCUEYgcHJvZy1pZD05NSBvcD1MT0FECkF1ZyAgMiAxNzowODo0
NSBKdXN0NHBMZWlzdXJlIHN5c3RlbWRbMV06IFN0YXJ0aW5nIGZwcmludGQuc2VydmljZSAtIEZp
bmdlcnByaW50IEF1dGhlbnRpY2F0aW9uIERhZW1vbi4uLgpBdWcgIDIgMTc6MDg6NDUgSnVzdDRw
TGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwg
c2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hl
ZHVsZXIgY29tcF8xLjMuMCBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NSBK
dXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJl
YWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDUgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1d
IHNjaGVkdWxlciBjb21wXzEuMi4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4
OjQ1IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBu
b3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NSBKdXN0NHBMZWlzdXJlIGtlcm5lbDog
W2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIg
MTc6MDg6NDUgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4x
IGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUga2Vy
bmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1
ZyAgMiAxNzowODo0NSBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBf
MS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDUgSnVzdDRwTGVpc3Vy
ZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMy4wIGlzIG5vdCByZWFkeSwgc2tpcHBp
bmcKQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIg
Y29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NSBKdXN0NHBM
ZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4yLjEgaXMgbm90IHJlYWR5LCBz
a2lwcGluZwpBdWcgIDIgMTc6MDg6NDUgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVk
dWxlciBjb21wXzEuMy4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ1IEp1
c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMCBpcyBub3QgcmVh
ZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NSBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0g
c2NoZWR1bGVyIGNvbXBfMS4wLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6
NDUgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMi4xIGlzIG5v
dCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUga2VybmVsOiBb
ZHJtXSBzY2hlZHVsZXIgY29tcF8xLjMuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAx
NzowODo0NSBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjAg
aXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDUgSnVzdDRwTGVpc3VyZSBrZXJu
ZWw6IFtkcm1dIHNjaGVkdWxlciBjb21wXzEuMC4xIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVn
ICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8x
LjIuMSBpcyBub3QgcmVhZHksIHNraXBwaW5nCkF1ZyAgMiAxNzowODo0NSBKdXN0NHBMZWlzdXJl
IGtlcm5lbDogW2RybV0gc2NoZWR1bGVyIGNvbXBfMS4zLjEgaXMgbm90IHJlYWR5LCBza2lwcGlu
ZwpBdWcgIDIgMTc6MDg6NDUgSnVzdDRwTGVpc3VyZSBrZXJuZWw6IFtkcm1dIHNjaGVkdWxlciBj
b21wXzEuMy4wIGlzIG5vdCByZWFkeSwgc2tpcHBpbmcKQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExl
aXN1cmUga2VybmVsOiBbZHJtXSBzY2hlZHVsZXIgY29tcF8xLjAuMSBpcyBub3QgcmVhZHksIHNr
aXBwaW5nCkF1ZyAgMiAxNzowODo0NSBKdXN0NHBMZWlzdXJlIGtlcm5lbDogW2RybV0gc2NoZWR1
bGVyIGNvbXBfMS4yLjEgaXMgbm90IHJlYWR5LCBza2lwcGluZwpBdWcgIDIgMTc6MDg6NDUgSnVz
dDRwTGVpc3VyZSBzeXN0ZW1kWzFdOiBTdGFydGVkIGZwcmludGQuc2VydmljZSAtIEZpbmdlcnBy
aW50IEF1dGhlbnRpY2F0aW9uIERhZW1vbi4KQXVnICAyIDE3OjA4OjQ1IEp1c3Q0cExlaXN1cmUg
YXVkaXRbMV06IFNFUlZJQ0VfU1RBUlQgcGlkPTEgdWlkPTAgYXVpZD00Mjk0OTY3Mjk1IHNlcz00
Mjk0OTY3Mjk1IHN1Ymo9c3lzdGVtX3U6c3lzdGVtX3I6aW5pdF90OnMwIG1zZz0ndW5pdD1mcHJp
bnRkIGNvbW09InN5c3RlbWQiIGV4ZT0iL3Vzci9saWIvc3lzdGVtZC9zeXN0ZW1kIiBob3N0bmFt
ZT0/IGFkZHI9PyB0ZXJtaW5hbD0/IHJlcz1zdWNjZXNzJwpBdWcgIDIgMTc6MDg6NDcgSnVzdDRw
TGVpc3VyZSBrc2NyZWVubG9ja2VyX2dyZWV0WzczOTQ0XTogcGFtX3VuaXgoa2RlOmF1dGgpOiB1
bmV4cGVjdGVkIHJlc3BvbnNlIGZyb20gZmFpbGVkIGNvbnZlcnNhdGlvbiBmdW5jdGlvbgpBdWcg
IDIgMTc6MDg6NDcgSnVzdDRwTGVpc3VyZSBrc2NyZWVubG9ja2VyX2dyZWV0WzczOTQ0XTogcGFt
X3VuaXgoa2RlOmF1dGgpOiBjb252ZXJzYXRpb24gZmFpbGVkCkF1ZyAgMiAxNzowODo0NyBKdXN0
NHBMZWlzdXJlIGtzY3JlZW5sb2NrZXJfZ3JlZXRbNzM5NDRdOiBwYW1fdW5peChrZGU6YXV0aCk6
IGF1dGggY291bGQgbm90IGlkZW50aWZ5IHBhc3N3b3JkIGZvciBbc29waGllXQpBdWcgIDIgMTc6
MDg6NTQgSnVzdDRwTGVpc3VyZSBrc2NyZWVubG9ja2VyX2dyZWV0WzczOTQ0XTogcGFtX3VuaXgo
a2RlOmF1dGgpOiB1c2VybmFtZSBbc29waGllXSBvYnRhaW5lZApBdWcgIDIgMTc6MDg6NTcgSnVz
dDRwTGVpc3VyZSBhdWRpdFs3NDE1MF06IFVTRVJfQVVUSCBwaWQ9NzQxNTAgdWlkPTEwMDAgYXVp
ZD0xMDAwIHNlcz0zIHN1Ymo9dW5jb25maW5lZF91OnVuY29uZmluZWRfcjpjaGtwd2RfdDpzMC1z
MDpjMC5jMTAyMyBtc2c9J29wPVBBTTp1bml4X2Noa3B3ZCBhY2N0PSJzb3BoaWUiIGV4ZT0iL3Vz
ci9zYmluL3VuaXhfY2hrcHdkIiBob3N0bmFtZT0/IGFkZHI9PyB0ZXJtaW5hbD0/IHJlcz1zdWNj
ZXNzJwo=
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>172304</attachid>
            <date>2024-08-05 13:42:31 +0000</date>
            <delta_ts>2024-08-05 13:42:31 +0000</delta_ts>
            <desc>/etc/pam.d/kde file</desc>
            <filename>kde</filename>
            <type>text/plain</type>
            <size>508</size>
            <attacher name="Sophie Dexter">sophie.dexter74</attacher>
            
              <data encoding="base64">YXV0aCAgICAgICAgc3Vic3RhY2sgICAgICBwYXNzd29yZC1hdXRoCmF1dGggICAgICAgIGluY2x1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==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>172305</attachid>
            <date>2024-08-05 13:44:12 +0000</date>
            <delta_ts>2024-08-05 13:44:12 +0000</delta_ts>
            <desc>/etc/authselect/password-auth - sssd version</desc>
            <filename>password-auth</filename>
            <type>text/plain</type>
            <size>2127</size>
            <attacher name="Sophie Dexter">sophie.dexter74</attacher>
            
              <data encoding="base64">IyBHZW5lcmF0ZWQgYnkgYXV0aHNlbGVjdAojIERvIG5vdCBtb2RpZnkgdGhpcyBmaWxlIG1hbnVh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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>172306</attachid>
            <date>2024-08-05 13:45:28 +0000</date>
            <delta_ts>2024-08-05 13:45:28 +0000</delta_ts>
            <desc>/etc/authselect/password-auth - local version</desc>
            <filename>password-auth</filename>
            <type>text/plain</type>
            <size>1272</size>
            <attacher name="Sophie Dexter">sophie.dexter74</attacher>
            
              <data encoding="base64">IyBHZW5lcmF0ZWQgYnkgYXV0aHNlbGVjdAojIERvIG5vdCBtb2RpZnkgdGhpcyBmaWxlIG1hbnVh
bGx5LCB1c2UgYXV0aHNlbGVjdCBpbnN0ZWFkLiBBbnkgdXNlciBjaGFuZ2VzIHdpbGwgYmUgb3Zl
cndyaXR0ZW4uCiMgWW91IGNhbiBzdG9wIGF1dGhzZWxlY3QgZnJvbSBtYW5hZ2luZyB5b3VyIGNv
bmZpZ3VyYXRpb24gYnkgY2FsbGluZyAnYXV0aHNlbGVjdCBvcHQtb3V0Jy4KIyBTZWUgYXV0aHNl
bGVjdCg4KSBmb3IgbW9yZSBkZXRhaWxzLgoKYXV0aCAgICAgICAgcmVxdWlyZWQgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgcGFtX2Vudi5zbwphdXRoICAgICAgICByZXF1aXJl
ZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwYW1fZmFpbGRlbGF5LnNvIGRl
bGF5PTIwMDAwMDAKYXV0aCAgICAgICAgc3VmZmljaWVudCAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgcGFtX3VuaXguc28gbnVsbG9rCmF1dGggICAgICAgIHJlcXVpcmVkICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHBhbV9kZW55LnNvCgphY2NvdW50ICAgICBy
ZXF1aXJlZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwYW1fdW5peC5zbwoK
cGFzc3dvcmQgICAgcmVxdWlzaXRlICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
cGFtX3B3cXVhbGl0eS5zbwpwYXNzd29yZCAgICBzdWZmaWNpZW50ICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICBwYW1fdW5peC5zbyB5ZXNjcnlwdCBzaGFkb3cgbnVsbG9rIHVzZV9h
dXRodG9rCnBhc3N3b3JkICAgIHJlcXVpcmVkICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgIHBhbV9kZW55LnNvCgpzZXNzaW9uICAgICBvcHRpb25hbCAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICBwYW1fa2V5aW5pdC5zbyByZXZva2UKc2Vzc2lvbiAgICAgcmVx
dWlyZWQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcGFtX2xpbWl0cy5zbwot
c2Vzc2lvbiAgICBvcHRpb25hbCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBw
YW1fc3lzdGVtZC5zbwpzZXNzaW9uICAgICBbc3VjY2Vzcz0xIGRlZmF1bHQ9aWdub3JlXSAgICAg
ICAgICAgICAgICAgICBwYW1fc3VjY2VlZF9pZi5zbyBzZXJ2aWNlIGluIGNyb25kIHF1aWV0IHVz
ZV91aWQKc2Vzc2lvbiAgICAgcmVxdWlyZWQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgcGFtX3VuaXguc28K
</data>

          </attachment>
      

    </bug>

</bugzilla>