Bug 444639 - Prompt for PIN when using systemd-homed FIDO login
Summary: Prompt for PIN when using systemd-homed FIDO login
Status: RESOLVED WORKSFORME
Alias: None
Product: kscreenlocker
Classification: Plasma
Component: general (show other bugs)
Version: 5.23.2
Platform: Arch Linux Linux
: NOR normal
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-30 01:44 UTC by Isaac
Modified: 2022-12-03 05:20 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Isaac 2021-10-30 01:44:08 UTC
SUMMARY
Support systemd-homed users when a FIDO U2F device is used with a PIN. Devices without a PIN work as expected in both sddm and kscreenlocker. When the user presses enter on a blank password dialog, the FIDO device prompts for presence and unlocks the computer. 

Once a PIN is registered, this process breaks. Sddm works if pin is entered as password dialog before enter. However, kscreenlocker no longer is capable of accepting the FIDO device to unlock the computer.


STEPS TO REPRODUCE
1. Plug in FIDO device such as Solo or Yubikey, setup FIDO2 device with PIN. 
2. Create systemd-homed user `homectl create foo --fido2-device=auto`
3. Follow prompts to enter PIN and register FIDO device with homed. Reboot.
4. Login with sddm by entering PIN in password dialog and activating device.
5. Lock screen. Attempt to unlock by pressing enter with blank password dialogue.

OBSERVED RESULT
Login failed. Password prompt unlocks. The FIDO device is not polled.

EXPECTED RESULT
kscreenlocker polls FIDO device and prompts for PIN entry (or allows PIN entry instead of password like SDDM).

SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Arch Linux 5.15.15-zen1-1-zen

KDE Plasma Version: 5.23.2
KDE Frameworks Version: 5.87.0
Qt Version: 5.15.2

ADDITIONAL INFORMATION

Related tickets: 430828, 396703
Comment 1 Nate Graham 2022-11-03 16:08:30 UTC
Can you check to see if this is still not working as expected on the lock screen in Plasma 5.26 or 5.26? Many PAM-related changes happened.
Comment 2 Bug Janitor Service 2022-11-18 05:16:25 UTC
Dear Bug Submitter,

This bug has been in NEEDSINFO status with no change for at least
15 days. Please provide the requested information as soon as
possible and set the bug status as REPORTED. Due to regular bug
tracker maintenance, if the bug is still in NEEDSINFO status with
no change in 30 days the bug will be closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

If you have already provided the requested information, please
mark the bug as REPORTED so that the KDE team knows that the bug is
ready to be confirmed.

Thank you for helping us make KDE software even better for everyone!
Comment 3 Bug Janitor Service 2022-12-03 05:20:23 UTC
This bug has been in NEEDSINFO status with no change for at least
30 days. The bug is now closed as RESOLVED > WORKSFORME
due to lack of needed information.

For more information about our bug triaging procedures please read the
wiki located here:
https://community.kde.org/Guidelines_and_HOWTOs/Bug_triaging

Thank you for helping us make KDE software even better for everyone!