Bug 402921 - 2FA feature for greeter
Summary: 2FA feature for greeter
Status: RESOLVED WORKSFORME
Alias: None
Product: kscreenlocker
Classification: Plasma
Component: general (show other bugs)
Version: unspecified
Platform: Arch Linux Linux
: NOR wishlist
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-01-06 12:41 UTC by Karouka
Modified: 2022-12-04 05:15 UTC (History)
5 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Karouka 2019-01-06 12:41:59 UTC
Hello,

While the 2-Factor validation feature brought by pam_google_authenticator.so could successfullly login through the GDM or LightDM, the KDE's own screen-greeter seems to have no support on 2FA.

I assume the configure file is /etc/pam.d/kde, but after alteration there is no way to login into the system by greeter itself. 

I've found there are also some enquiries to this issue before:
https://www.spinics.net/lists/kde/msg21998.html
https://askubuntu.com/questions/972710/two-factor-authentication-with-kubuntu-screensaver

Hopes there could be possible solutions adhere or in the later KDE versions.

Thanks
Comment 1 David Edmundson 2019-01-06 17:49:02 UTC
You're mixing up terms. 

kscreenlocker is not a login interface equivalent to GDM or lightDM
Comment 2 Karouka 2019-01-07 03:16:31 UTC
(In reply to David Edmundson from comment #1)
> You're mixing up terms. 
> 
> kscreenlocker is not a login interface equivalent to GDM or lightDM

I understand that kscreenlocker is just a lock-up tool like xscrrensaver, etc. DM is another tool which 'introduce' the KDE or other DE.

Under the normal KDE experience, a user may use the kscreenlocker to lock up their desktop session, instead of log out to use DM-related login interface.

Upon the issue, when I change the auth line about 2FA tools in 'required' mode in /etc/pam.d/system-login, the lightDM works perfectly, but when you enter the KDE, using kscreenlocker to lock your session, their is the problem.

When I change the line into 'sufficient' mode, the kscreenlocker works!

It seems that there should be the implementation to help entering the verification code

I have tried GDM, there is no such a issue in the previous login or later lock screen.

Thanks.
Comment 3 Nate Graham 2022-11-04 20:19:31 UTC
Thank you for reporting this feature request in KDE software. As it has been a while since it was reported, can we please ask you to see if it's still relevant with a recent software version? Like Plasma 5.25, or ideally 5.26?

If so, please change the status to "CONFIRMED" when replying. Thank you!
Comment 4 Bug Janitor Service 2022-11-19 05:14:23 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 5 Bug Janitor Service 2022-12-04 05:15:55 UTC
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!