Bug 323339

Summary:	Unable to unlock when two factor authentication is enabled
Product:	kscreensaver	Reporter:	Björn Ballard <bjorn.ballard+kdebugs>
Component:	locker-qml	Assignee:	Plasma Bugs List <plasma-bugs>
Status:	RESOLVED INTENTIONAL
Severity:	normal	CC:	felixonmars, mgraesslin
Priority:	NOR
Version:	4.10.5
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed In:

Description Björn Ballard 2013-08-10 11:32:40 UTC

Two factor authentication has been enabled as required in PAM such that username, UNIX password, and an OTP code are required to login. All logins are via console.

Once KDE is started (via login script and not a display manager), if the screen becomes locked the user is only able to enter username and UNIX password into the screen unlocker. There is no way to also enter the OTP, therefore the screen can not be unlocked.

Reproducible: Always

Steps to Reproduce:
1. Enable two factor authentication as "required" in /etc/pam.d/system-auth (eg. pam_google_authenticator.so as that is readily available)
2. Login via console with username, UNIX password and OTP
3. Start KDE
4. Lock screen
5. Wiggle mouse to bring up unlock dialog
6. Enter username and UNIX password
Actual Results:  
Screen does not unlock due to authentication failure.

Expected Results:  
Unlocked screen.

Comment 1 Martin Flöser 2015-01-23 14:17:37 UTC

The screen locker architecture changed with Plasma 5. The classic screen savers are no longer supported. The 4.x series won't see any further feature development, so this bug report won't be implemented as it doesn't apply to our current version any more.

I want to thank you for your bug report and for helping improving the quality of our software and I'm sorry that we were not able to provide a fix before we retired the affected component.