Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation? dist-upgrade
   * What exactly did you do (or not do) that was effective (or
     ineffective)? workaround was to configure auto login
   * What was the outcome of this action? was able to login
   * What outcome did you expect instead? without autologin, I am unable to login.  GDM does not detect my user and I can not manually enter in my username.

*** End of the template - remove these template lines ***

The issue seems to be having my Yubikey plugged in when GDM starts its
looking for pam_sss.so.  If the pam module is missing one cannot login
interactively.  I will try installing libpam-sss, to see if that revolves
the issue.  However it can be fixed by removing my yubikey and plug it in
after logging into gdm.

Control: retitle -1 gdm3 45 does not detect users correctly with Yubikey connected
Control: severity -1 important
gdm3 version 45. If I understand correctly, this version integrated some
changes that were previously in Ubuntu, aiming to improve the ability to
use smartcards for authentication with gdm; but those changes go too far,
and break the ability to do non-smartcard authentication if related
PAM modules are not installed.

gdm should only do this if it can work: if the relevant PAM module
(pam_sss.so) is installed, and if the user/sysadmin has also configured
smartcard-based identities so that they can log in like this.

If you run as root

    update-alternatives --set gdm-smartcard /etc/pam.d/gdm-smartcard-sssd-or-password

does that restore previous functionality?

Marco: I think we should set the alternatives priority of
gdm-smartcard-sssd-or-password higher than gdm-smartcard-sssd-exclusive
in debian/gdm3.alternatives, unless there is a reason I'm not seeing
why that isn't viable.

    smcv

Hello,

I hit this issue today after upgrading to gdm 45~beta-1 . Switching to
"/etc/pam.d/gdm-smartcard-sssd-or-password" works, but breaks "face
chooser" on the GDM login screen.
Apparently the same happens also on Ubuntu. Please see:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1933027/comments/13 .

It would be great if either one could disable smart-card integration via
update-alternatives (as suggested here:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1933027/comments/12) or
if "gdm-smartcard-sssd-or-password" could provide the same login experience
as of the previous behavior.

Thank you

Regards