URL:
https://github.com/SSSD/sssd/pull/268
Title: #268: pam_sss: add support for SSS_PAM_CERT_INFO_WITH_HINT
fidencio commented:
"""
This version works as expected!
The way I tested the patches:
- promptusername: False
```
[root@client x86_64]# sssctl user-checks "" -a auth -s gdm-smartcard
user:
action: auth
service: gdm-smartcard
testing pam_authenticate
Password:
pam_authenticate for user []: Authentication failure
PAM Environment:
- no env -
```
- promptusername: True
```
[root@client x86_64]# sssctl user-checks "" -a auth -s gdm-smartcard
user:
action: auth
service: gdm-smartcard
testing pam_authenticate
PIN for PIV Card Holder pin (PIV_II)
User name hint: alice
pam_authenticate for user [alice]: Success
PAM Environment:
- PKCS11_LOGIN_TOKEN_NAME=PIV Card Holder pin (PIV_II)
```
However, I may have found an issue that is not related to this series (as it still happens
on master).
So, let me ask you whether do you think it's a bug or something expected (due to a
miss configuration, maybe?) ...
In case alice doesn't have a password set, `sssctl user-checks alice(a)sc.ff -a auth -s
gdm-smartcard ` works as expected and the authentication is successful just using the
PIN.
In case alice does have a password set, `sssctl user-checks alice(a)sc.ff -a auth -s
gdm-smartcard ` still asked for the PIN (which seems correct), but the authentication
fails.
As this possible issue is *not* related to this patch set ... I'll ack the series
after running coverity/ci on those patches.
"""
See the full comment at
https://github.com/SSSD/sssd/pull/268#issuecomment-305298996