-
According to [PAM-PKCS11 User Manual][1], user can provide a empty username and it will set username by mapped smartcard. However, this currently does not work for gdm-smartcard, because pam_shells will fail first on empty username. Because [pam_shells do not check empty username before checking whether username exists][2], we can do nothing to workaround it for empty username, so just move it under pam_pkcs11 so it will check the auto-detected username. [1]: http://opensc.github.io/pam_pkcs11/doc/pam_pkcs11.html#autologin [2]: https://github.com/linux-pam/linux-pam/commit/b52bd25910c9a8a32a49be7627a709a081a3768c
According to [PAM-PKCS11 User Manual][1], user can provide a empty username and it will set username by mapped smartcard. However, this currently does not work for gdm-smartcard, because pam_shells will fail first on empty username. Because [pam_shells do not check empty username before checking whether username exists][2], we can do nothing to workaround it for empty username, so just move it under pam_pkcs11 so it will check the auto-detected username. [1]: http://opensc.github.io/pam_pkcs11/doc/pam_pkcs11.html#autologin [2]: https://github.com/linux-pam/linux-pam/commit/b52bd25910c9a8a32a49be7627a709a081a3768c
Loading