Bug ID 1205768
Summary Plasma Lockscreen and pam_u2f: Unlock needed for each monitor?
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component KDE Workspace (Plasma)
Assignee opensuse-kde-bugs@opensuse.org
Reporter opensuse_buildservice@ojkastl.de
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

Hi,

current openSUSE Tumbleweed on a X86_64 Laptop
KDE Plasma (X11, not wayland)
pam_u2f-1.2.1-1.2.x86_64

I am using pam_u2f to unlock my Plasma/KDE lock screen using a U2F device (the
predecessor of FIDO).

PAM configuration for sudo and sudo-i:

```
# etc/pam.d/sudo
#%PAM-1.0
auth     sufficient     pam_u2f.so      authfile=/etc/Yubico/u2f_keys cue
[...]
```

PAM configuration for KDE unlocking (with openasuser, so it checks for the user
that is logged in)

```
# /etc/pam.d/kde
#%PAM-1.0
auth     sufficient     pam_u2f.so      openasuser
[...]
```

Works like a charm with sudo. Enter "sudo ls", the device starts blinking, I
confirm and the command is executed.

Works like a charm with the lockscreen, if the laptop is NOT connected to an
external monitor.

- plasma is locked
- I move the mouse
- the U2F device starts blinking
- I touch the U2F device and confirm
- the blinking stops
- I get a "Entsperren" (Unlock) button instead of the password prompt on the
lock screen
- I press that button or hit ENTER
- the screen is unlocked

Works with two external monitors connected, but it seems I need to go through
the "press U2F device and click the 'unlock' button" process for each monitor.
In my case, three times. Sometimes it seems to be enough to just have 2 of
each, however: Once should be enough.

- plasma is locked
- I move the mouse
- the U2F device starts blinking
- I touch the U2F device and confirm
- the blinking stops
- I get a "Entsperren" (Unlock) button instead of the password prompt on the
lock screen
- I press that button or hit ENTER
- **the lock screen stays, the device starts blinking again**
- I touch the U2F device and confirm
- the blinking stops
- I get a "Entsperren" (Unlock) button instead of the password prompt on the
lock screen
- I press that button or hit ENTER
- **the lock screen stays, the device starts blinking again**
- I touch the U2F device and confirm
- the blinking stops
- I get a "Entsperren" (Unlock) button instead of the password prompt on the
lock screen
- I press that button or hit ENTER
- the screen is unlocked

Not sure if there are any logs that I can provide?

In case of questions, please reach out.

Kind Regards,
Johannes


You are receiving this mail because: