Bug 487634 - Option to unlock by Fingerprint and Smartcard shown despite not having either one
Summary: Option to unlock by Fingerprint and Smartcard shown despite not having either...
Status: RESOLVED DOWNSTREAM
Alias: None
Product: plasmashell
Classification: Plasma
Component: Screen locking (show other bugs)
Version: 6.2.4
Platform: Other Linux
: NOR normal
Target Milestone: 1.0
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-05-27 16:49 UTC by postix
Modified: 2025-03-04 01:21 UTC (History)
4 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description postix 2024-05-27 16:49:10 UTC
SUMMARY

Option to unlock by Fingerprint and Smartcard shown despite not having either one.

Journalctl logs

```
kscreenlocker_greet: PAM unable to dlopen(/usr/lib64/security/pam_pkcs11.so): /usr/lib64/security/pam_pkcs11.so: Cannot open shared object file: File or folder not found
kscreenlocker_greet: PAM adding faulty module: /usr/lib64/security/pam_pkcs11.so
kscreenlocker_greet: PAM unable to dlopen(/usr/lib64/security/pam_fprintd.so): /usr/lib64/security/pam_fprintd.so: Cannot open shared object file: File or folder not found
kscreenlocker_greet: PAM adding faulty module: /usr/lib64/security/pam_fprintd.so
kscreenlocker_greet: pam_kwallet5(kde-fingerprint:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde-fingerprint:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde-smartcard:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde-smartcard:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde:auth): pam_kwallet5: pam_sm_authenticate
kscreenlocker_greet: pam_kwallet5(kde:auth): pam_kwallet5: we were already executed
kscreenlocker_greet: pam_kwallet5(kde:setcred): pam_kwallet5: pam_sm_setcred
kscreenlocker_greet: qt.qpa.wayland: Could not create EGL surface (EGL error 0x3000)
unix_chkpwd[16117]: password check failed for user (<user>)
kscreenlocker_greet: pam_unix(kde-fingerprint:auth): authentication failure; logname=<user> uid=1000 euid=1000 tty= ruser= rhost=  user=<user>
unix_chkpwd[16118]: password check failed for user (<user>)
kscreenlocker_greet: pam_unix(kde-smartcard:auth): authentication failure; logname=<user> uid=1000 euid=1000 tty= ruser= rhost=  user=<user>
kscreenlocker_greet: Failed to write to the pipe: Invalid file descriptor.
```


SOFTWARE/OS VERSIONS
Operating System: openSUSE Tumbleweed 20240521
KDE Plasma Version: 6.0.4
KDE Frameworks Version: 6.2.0
Qt Version: 6.7.0
Kernel Version: 6.9.1-1-default (64-bit)
Graphics Platform: Wayland
MB: Asus  ROG STRIX X570-E GAMING
Comment 1 TraceyC 2025-03-04 01:21:47 UTC
I can confirm this on OpenSuse Tumbleweed
I can't reproduce on Solus with  git-master on a system without a fingerprint reader, and no smart card inserted
I don't see the smart card text on git-master Solus which has no smartcard inserted
I haven't seen this in test VMs for Neon (Testing / User), Fedora 41 or Kubuntu 24.10

Based on the journalctl logs, this looks like it's possibly a packaging issue of pam / pam_kwallet5 with OpenSuse. I recommend creating a bug report with them so they can investigate on their end.
https://en.opensuse.org/openSUSE:Submitting_bug_reports