[Bug 1203099] New: Cannot unblock GNOME desktop using the fingerprint scanner
https://bugzilla.suse.com/show_bug.cgi?id=1203099 Bug ID: 1203099 Summary: Cannot unblock GNOME desktop using the fingerprint scanner Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs@suse.de Reporter: grace.wang@suse.com QA Contact: qa-bugs@suse.de CC: alynx.zhou@suse.com, mail@vsv.dev, yfjiang@suse.com, zcjia@suse.com Depends on: 1189621 Found By: Community User Blocker: --- Env: openSUSE Leap 15.4 GNOME 41.2 gdm 41.3 fprintd 1.94.1 hardware: Thinkpad P15 Gen1 +++ This bug was initially created as a clone of Bug #1189621 +++ Despite the fact that `fprintd` is installed, the fingerprints are configured and `fprintd-verify` recognizes them, I still cannot use the fingerprint scanner in order to unlock my GNOME session. Reproducible: Always Steps to Reproduce: 1. Install fprintd via `sudo zypper in fprintd` 2. Enable 'Fingerprint Login' in 'Gnome Settings > Users' GUI application and add a fingerprint 3. Verify that it works when invoking `fprintd-verify` from the command line: fprintd-verify Using device /net/reactivated/Fprint/Device/0 Listing enrolled fingers: - #0: right-index-finger Verify started! Verifying: right-index-finger Verify result: verify-match (done) 3. Lock the screen in GNOME 4. Try to unlock the screen Actual Results: Unlocking via the fingerprint scanner doesn't work. "Sorry, that didn't work. Please try again." message keeps appearing every ~2 sec no matter whether I use the fingerprint scanner or not. The session can be unlocked only by entering the password. Expected Results: Both password and fingerprint scan should unlock the GNOME session. ~> zypper info gnome-shell | grep Version Version : 40.3-4.1 ~> zypper info gdm | grep Version Version : 3.38.2-2.6 ~> zypper info fprintd | grep Version Version : 1.90.9-2.3 ~> cat /etc/os-release | grep VERSION_ID VERSION_ID="20210817" ~> sudo journalctl --since "10 min ago" | grep fingerprint Aug 19 19:58:55 vsv-thinkpad gdm-fingerprint][5155]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] terminal=[/dev/tty7] user=[vsv] ruser=[<unknown>] rhost=[<unknown>] Aug 19 19:58:58 vsv-thinkpad gdm-fingerprint][5162]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] terminal=[/dev/tty7] user=[vsv] ruser=[<unknown>] rhost=[<unknown>] Aug 19 19:59:00 vsv-thinkpad gdm-fingerprint][5168]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] terminal=[/dev/tty7] user=[vsv] ruser=[<unknown>] rhost=[<unknown>] Aug 19 19:59:03 vsv-thinkpad gdm-fingerprint][5171]: pam_warn(gdm-fingerprint:auth): function=[pam_sm_authenticate] flags=0 service=[gdm-fingerprint] terminal=[/dev/tty7] user=[vsv] ruser=[<unknown>] rhost=[<unknown>] ~> sudo fwupdmgr get-devices ... ������Prometheus: ��� ��� Device ID: 50efef912094e784a03628350441f6927c4920b0 ��� ��� Summary: Fingerprint reader ��� ��� Current version: 10.01.3273255 ��� ��� Vendor: Synaptics (USB:0x06CB) ��� ��� Install Duration: 2 seconds ��� ��� Serial Number: 60900456185485 ��� ��� GUIDs: 09e8bf16-3e69-50f5-bb66-c7a040248352 ��� USB\VID_06CB&PID_00BD&REV_0000 ��� ��� 8088f861-6318-5b1e-9ce4-fbddbedb09ac ��� USB\VID_06CB&PID_00BD ��� ��� Device Flags: ��� Updatable ��� ��� ��� Supported on remote server ��� ��� ��� Cryptographic hash verification is available ~> uname -a Linux vsv-thinkpad 5.13.8-1-default #1 SMP Thu Aug 5 08:56:22 UTC 2021 (967c6a8) x86_64 x86_64 x86_64 GNU/Linux Hardware Model: Lenovo ThinkPad T14 Gen 1 (AMD) Windowing System: Wayland -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 https://bugzilla.suse.com/show_bug.cgi?id=1203099#c1 --- Comment #1 from Yifan Jiang <yfjiang@suse.com> --- Hi Grace, Thanks for the testing, could you provide the journal (with gdm debug message) as that was asked in the bug https://bugzilla.suse.com/show_bug.cgi?id=1189621 ? -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 Yifan Jiang <yfjiang@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |grace.wang@suse.com Flags| |needinfo?(grace.wang@suse.c | |om) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 https://bugzilla.suse.com/show_bug.cgi?id=1203099#c2 Grace Wang <grace.wang@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(grace.wang@suse.c | |om) | --- Comment #2 from Grace Wang <grace.wang@suse.com> --- Created attachment 861297 --> https://bugzilla.suse.com/attachment.cgi?id=861297&action=edit journal log with gdm debug enabled Attachment is the journal when I tried to login with fingerprint and failed. Finally login successfully with correct password. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 https://bugzilla.suse.com/show_bug.cgi?id=1203099#c3 Alynx Zhou <alynx.zhou@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo? --- Comment #3 from Alynx Zhou <alynx.zhou@suse.com> --- OK, I finally found the reason, it seems that we don't package the gdm-fingerprint pam config. I checked `/usr/lib/pam.d/`, there is no gdm-fingerprint file, so when gdm call pam to do fprint check, it always fails. I manually copied gdm-fingerprint file from my arch linux installation, and fingerprint sensor just works on login and unlock. According to line 20 and line 376 of https://build.opensuse.org/package/view_file/GNOME:Factory/gdm/gdm.spec?expa..., it seems that we don't install gdm-fingerprint files at all, and in line 296 it says that we don't know what to put in gdm-fingerprint (also about line 295: my system does not remove gdm-password). So I checked https://build.opensuse.org/package/view_file/GNOME:Factory/gdm/gdm-fingerpri..., it contains nothing about pam_fprintd.so, so even we install it, it won't work. Some distros uploaded their pam files to https://gitlab.gnome.org/GNOME/gdm/-/tree/main/data (like Arch and Red Hat), they are quite different, we may need create our own to fix this bug? -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 https://bugzilla.suse.com/show_bug.cgi?id=1203099#c4 Alynx Zhou <alynx.zhou@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo? | --- Comment #4 from Alynx Zhou <alynx.zhou@suse.com> --- This bug also happens on tumbleweed -- which is worse because when you try to login it fails and return you to user list, inserting password is impossible. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 Grace Wang <grace.wang@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Cannot unblock GNOME |Cannot unlock GNOME desktop |desktop using the |using the fingerprint |fingerprint scanner |scanner -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 Bug 1203099 depends on bug 1189621, which changed state. Bug 1189621 Summary: Cannot unblock GNOME desktop using the fingerprint scanner https://bugzilla.suse.com/show_bug.cgi?id=1189621 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1203099 https://bugzilla.suse.com/show_bug.cgi?id=1203099#c5 Alynx Zhou <alynx.zhou@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Alynx Zhou <alynx.zhou@suse.com> --- I think we now have working fingerprint in Leap/Tumbleweed, so close this. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com