https://bugs.kde.org/show_bug.cgi?id=444639
Bug ID: 444639
Summary: Prompt for PIN when using systemd-homed FIDO login
Product: kscreenlocker
Version: 5.23.2
Platform: Archlinux Packages
OS: Linux
Status: REPORTED
Severity: normal
Priority: NOR
Component: kcheckpass
Assignee: plasma-b...@kde.org
Reporter: isaaccurt...@gmail.com
CC: bhus...@gmail.com
Target Milestone: ---
SUMMARY
Support systemd-homed users when a FIDO U2F device is used with a PIN. Devices
without a PIN work as expected in both sddm and kscreenlocker. When the user
presses enter on a blank password dialog, the FIDO device prompts for presence
and unlocks the computer.
Once a PIN is registered, this process breaks. Sddm works if pin is entered as
password dialog before enter. However, kscreenlocker no longer is capable of
accepting the FIDO device to unlock the computer.
STEPS TO REPRODUCE
1. Plug in FIDO device such as Solo or Yubikey, setup FIDO2 device with PIN.
2. Create systemd-homed user `homectl create foo --fido2-device=auto`
3. Follow prompts to enter PIN and register FIDO device with homed. Reboot.
4. Login with sddm by entering PIN in password dialog and activating device.
5. Lock screen. Attempt to unlock by pressing enter with blank password
dialogue.
OBSERVED RESULT
Login failed. Password prompt unlocks. The FIDO device is not polled.
EXPECTED RESULT
kscreenlocker polls FIDO device and prompts for PIN entry (or allows PIN entry
instead of password like SDDM).
SOFTWARE/OS VERSIONS
Linux/KDE Plasma: Arch Linux 5.15.15-zen1-1-zen
KDE Plasma Version: 5.23.2
KDE Frameworks Version: 5.87.0
Qt Version: 5.15.2
ADDITIONAL INFORMATION
Related tickets: 430828, 396703
--
You are receiving this mail because:
You are watching all bug changes.
