| Summary: | When elevating privileges, takes long time for password to be accepted if fingerprint is enrolled. | ||
|---|---|---|---|
| Product: | [Plasma] policykit-kde-agent-1 | Reporter: | hyperspeed1313 |
| Component: | general | Assignee: | Unassigned bugs mailing-list <unassigned-bugs> |
| Status: | CONFIRMED --- | ||
| Severity: | normal | CC: | drf, hyperspeed1313, jgrulich, jreznik, nate, sitter, xaver.hugl |
| Priority: | NOR | ||
| Version: | 6.1.5 | ||
| Target Milestone: | --- | ||
| Platform: | Fedora RPMs | ||
| OS: | Linux | ||
| Latest Commit: | Version Fixed In: | ||
| Sentry Crash Report: | |||
| Attachments: | Stays on this screen for 20-30 seconds after inputting password | ||
I wasn't sure what project to write this against. kdesu looks different to the authentication prompt I'm seeing and I don't have kdesudo installed, which are the two projects I might have written this against. My best guess here is that your PAM configuration simply doesn't account for this. It's tricky though. The way authentication works is sequentially, i.e. a module requests authentication and if that fails for whatever reason (or gets cancelled) the next module in the list gets to try authenticating. Fundamentally that appears what is happening here. If the fprintd module is listed first it will request a finger print input, if you don't provide it within 20-ish seconds the request times out and the regular password module request authentication kicks in. Hence the delay. I am not sure we can do much more than have the actual auth request text displayed in the UI somewhere. Then at least there will be a hint that the authentication method in question is a finger print rather than a password. |
Created attachment 174448 [details] Stays on this screen for 20-30 seconds after inputting password STEPS TO REPRODUCE 1. Enroll fingerprint 2. Run graphical application that requires elevated privileges (e.g. KDE Partition Manager) 3. Authenticate using password instead of fingerprint OBSERVED RESULT There is a ~20-30 second delay while waiting for a fingerprint. The fingerprint prompt then changes to say "Verification timed out" at which point the password is accepted. This delay occurs whether I close the hint telling me to use fingerprint authentication or leave it visible. EXPECTED RESULT The GUI should try the provided password immediately and bypass the fingerprint reader timeout. SOFTWARE/OS VERSIONS Windows: macOS: (available in the Info Center app, or by running `kinfo` in a terminal window) Linux/KDE Plasma: Fedora 40 KDE Spin - Kernel 6.10.11-200.fc40.x86_64 KDE Plasma Version: 6.1.5 KDE Frameworks Version: 6.6.0 Qt Version: 6.7.2