Bug#1051785: gdm3 won't allow logins when a smarcard with a x.509 credential is plugged in

[Harlan Lieberman-Berg]

On Sun, Sep 17, 2023 at 12:13 PM Simon McVittie <smcv at debian.org> wrote:
> If you run as root
>
>     update-alternatives --set gdm-smartcard /etc/pam.d/gdm-smartcard-sssd-or-password
>
> does that restore previous functionality?

Sort of!  It doesn't fix the changes to the UI (i.e., there is no
longer a list of users to select from; it is a username box where the
"go back" button does nothing), but you can login by putting the
username in by hand.  That part is, obviously, the most important one.

Is the issue here one of defaults (e.g., the wrong PAM profile being
set), or one of detection (are smartcards a valid choice at all)?

Potentially unrelated sidenote: setting
`/org/gnome/login-screen/enable-smartcard-authentication` to `false`
has no effect on the ability to login; it still refuses to allow
password auth.

Sincerely,

-- 
Harlan Lieberman-Berg
~hlieberman