Comment # 10 on bug 1100954 from Fabian Vogt

(In reply to Stanislav Brabec from comment #8)
> There were only minimal changes in pam_pkcs11 between 42.3 and 15.0: version
> upgrade and addition of pkcs11_eventmgr.service.
> 
> I initially suspected that that some of KDE components incorrectly
> implements additional pam_prompt(). But comparing the logs, it does not look
> as the issue here.

SDDM's pam_prompt only handles the trivial password input cases, which explains
why kdm works.

> Screensavers are detected by PAM module name match. The list is provided by
> the screen_savers configuration value found in the root of the configuration
> file. In case of screensaver, PKCS11_LOGIN_TOKEN_NAME is required. (It is
> expected that the display manager pam_pkcs11 module will set it.)

kcheckpass uses xdm here, not a special pam module. Is it necessary that
lockscreens get detected as such?

> you are using coolkey module. It got some major changes in Leap 15 (but the
> same changes reached 42.3 as an Online Update).