https://bugzilla.suse.com/show_bug.cgi?id=1203100
Bug ID: 1203100 Summary: Disable fingerprint login doesn't work. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs@suse.de Reporter: grace.wang@suse.com QA Contact: qa-bugs@suse.de CC: alynx.zhou@suse.com, yfjiang@suse.com, zcjia@suse.com Found By: --- Blocker: ---
Env: openSUSE Leap 15.4 GNOME 41.2 gdm 41.3 fprintd 1.94.1 hardware: Thinkpad P15 Gen1
Steps: 1. Boot to desktop and login 2. Disable the fingerprint login in gnome-control-center -> Users 3. Logout or even restart 4. Try to login, stay on the input password screen and observe the warning message below the input field.
Actual Result: The "Sorry, fingerprint authentication didn't work. Please try again." message keeps appearing every ~2 sec no matter whether I use the fingerprint scanner or not.
From the journal log we can see the Fingerprint Authentication Daemon is started even we already disable it in gnome-control-center. ============================================================================== Sep 05 11:12:25 MiWiFi-R3600-srv dbus-daemon[1022]: [system] Activating via systemd: service name='net.reactivated.Fprint' unit='fprintd.service' requested b> Sep 05 11:12:25 MiWiFi-R3600-srv systemd[1]: Starting Fingerprint Authentication Daemon... Sep 05 11:12:26 MiWiFi-R3600-srv dbus-daemon[1022]: [system] Successfully activated service 'net.reactivated.Fprint' Sep 05 11:12:26 MiWiFi-R3600-srv systemd[1]: Started Fingerprint Authentication Daemon. Sep 05 11:12:26 MiWiFi-R3600-srv gdm-fingerprint][828]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] term> Sep 05 11:12:29 MiWiFi-R3600-srv gdm-fingerprint][837]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] term> =============================================================================
Related issue: https://bugzilla.suse.com/show_bug.cgi?id=1203099
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c1
Yifan Jiang yfjiang@suse.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |gnome-bugs@suse.de Assignee|gnome-bugs@suse.de |alynx.zhou@suse.com
--- Comment #1 from Yifan Jiang yfjiang@suse.com --- I am not sure the correct behavior of Fingerprint Authentication Daemon itself. But when the fingerprint login disabled, the fingerprint check should be completely disabled (i.e. no error message, no way to login with fingerprint from gdm).
@Alynx could you help here please.
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c2
--- Comment #2 from Alynx Zhou alynx.zhou@suse.com --- ShellUserVerifier do get a FprintManagerProxy in it's initialization, so it is OK that fprintd is started even fingerprint login is disabled.
The problem is why fingerprint authentication is used when it is disabled...
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c3
--- Comment #3 from Alynx Zhou alynx.zhou@suse.com --- Maybe I need a fingerprint sensor to debug this...
https://bugzilla.suse.com/show_bug.cgi?id=1203100
Cliff Zhao qzhao@suse.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |qzhao@suse.com
https://bugzilla.suse.com/show_bug.cgi?id=1203100
Cliff Zhao qzhao@suse.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC|qzhao@suse.com |
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c10
--- Comment #10 from Alynx Zhou alynx.zhou@suse.com --- OK, I just reproduced this on newly installed Leap 15.4, I'll try to fix it.
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c11
--- Comment #11 from Alynx Zhou alynx.zhou@suse.com --- So I think the problem is gnome-control-center only disables fingerprint authentication in user's gsettings, but not gdm's. You can check this by `sudo -u gdm gsettings get org.gnome.login-screen enable-fingerprint-authentication`, gnome-control-center does not modify this.
I can disable fingerprint authentication in gdm login screen by running `sudo -u gdm dbus-run-session gsettings set org.gnome.login-screen enable-fingerprint-authentication false`.
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c12
--- Comment #12 from Alynx Zhou alynx.zhou@suse.com --- Also, it seems that gnome-control-center does not modify user's gsettings either. If I disable fingerprint in settings, I still get true in gsettings.
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c13
--- Comment #13 from Alynx Zhou alynx.zhou@suse.com --- emmm, it seems that the gsettings key is used to control all fingerprint related (If disabled, gnome-control-center won't show fingerprint row at all), so it's not related.
Maybe there are some problem of fprintd, because even I added fingerprint I cannot unlock with it.
https://bugzilla.suse.com/show_bug.cgi?id=1203100 https://bugzilla.suse.com/show_bug.cgi?id=1203100#c14
Alynx Zhou alynx.zhou@suse.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED
--- Comment #14 from Alynx Zhou alynx.zhou@suse.com --- I think we now have working fingerprint in Leap/Tumbleweed, so close this.
-
bugzilla_noreply＠suse.com