Bug 487634

Summary:	Option to unlock by Fingerprint and Smartcard shown despite not having either one
Product:	[Plasma] plasmashell	Reporter:	postix <postix>
Component:	Screen locking	Assignee:	Plasma Bugs List <plasma-bugs-null>
Status:	RESOLVED DOWNSTREAM
Severity:	normal	CC:	kdedev, nate, uhhadd, voidpointertonull+bugskdeorg
Priority:	NOR
Version First Reported In:	6.2.4
Target Milestone:	1.0
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description postix 2024-05-27 16:49:10 UTC

SUMMARY

Option to unlock by Fingerprint and Smartcard shown despite not having either one.

Journalctl logs

```
kscreenlocker_greet: PAM unable to dlopen(/usr/lib64/security/pam_pkcs11.so): /usr/lib64/security/pam_pkcs11.so: Cannot open shared object file: File or folder not found
kscreenlocker_greet: PAM adding faulty module: /usr/lib64/security/pam_pkcs11.so
kscreenlocker_greet: PAM unable to dlopen(/usr/lib64/security/pam_fprintd.so): /usr/lib64/security/pam_fprintd.so: Cannot open shared object file: File or folder not found
kscreenlocker_greet: PAM adding faulty module: /usr/lib64/security/pam_fprintd.so
kscreenlocker_greet: pam_kwallet5(kde-fingerprint:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde-fingerprint:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde-smartcard:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde-smartcard:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde:setcred): pam_kwallet5: pam_sm_setcred
kscreenlocker_greet: qt.qpa.wayland: Could not create EGL surface (EGL error 0x3000)
unix_chkpwd[16117]: password check failed for user (<user>)
kscreenlocker_greet: pam_unix(kde-fingerprint:auth): authentication failure; logname=<user> uid=1000 euid=1000 tty= ruser= rhost=  user=<user>
unix_chkpwd[16118]: password check failed for user (<user>)
kscreenlocker_greet: pam_unix(kde-smartcard:auth): authentication failure; logname=<user> uid=1000 euid=1000 tty= ruser= rhost=  user=<user>
kscreenlocker_greet: Failed to write to the pipe: Invalid file descriptor.
```


SOFTWARE/OS VERSIONS
Operating System: openSUSE Tumbleweed 20240521
KDE Plasma Version: 6.0.4
KDE Frameworks Version: 6.2.0
Qt Version: 6.7.0
Kernel Version: 6.9.1-1-default (64-bit)
Graphics Platform: Wayland
MB: Asus  ROG STRIX X570-E GAMING

Comment 1 TraceyC 2025-03-04 01:21:47 UTC

I can confirm this on OpenSuse Tumbleweed
I can't reproduce on Solus with  git-master on a system without a fingerprint reader, and no smart card inserted
I don't see the smart card text on git-master Solus which has no smartcard inserted
I haven't seen this in test VMs for Neon (Testing / User), Fedora 41 or Kubuntu 24.10

Based on the journalctl logs, this looks like it's possibly a packaging issue of pam / pam_kwallet5 with OpenSuse. I recommend creating a bug report with them so they can investigate on their end.
https://en.opensuse.org/openSUSE:Submitting_bug_reports