Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unlocking via Yubikey regression since updating to 1.8.0 #377

Open
b0ch3nski opened this issue Oct 2, 2024 · 1 comment
Open

Unlocking via Yubikey regression since updating to 1.8.0 #377

b0ch3nski opened this issue Oct 2, 2024 · 1 comment

Comments

@b0ch3nski
Copy link

Hi,

I've noticed little regression after updating to 1.8.0.

Behavior on 1.7.2:

  1. Screen is locked, I'm pressing "Enter"
  2. Yubikey blinks, after touching Yubikey screen unlocks, Yubikey stops blinking

Behavior on 1.8.0:

  1. Screen is locked, I'm pressing "Enter"
  2. Yubikey blinks, after touching Yubikey screen unlocks, but Yubikey still blinks (or starts blinking again? hard to notice) like it's waiting for another touch input

Here is a relevant /etc/pam.d/system-auth section:

#%PAM-1.0
auth       sufficient                  pam_u2f.so           authfile=/etc/u2f_mappings cue
auth       required                    pam_faillock.so      preauth
...

My guess is that for some reason, swaylock tries to go through PAM twice ... ?

@mstoeckl
Copy link
Contributor

mstoeckl commented Oct 12, 2024

I don't have the setup to reproduce this issue, but suspect it's caused by swaylock queuing multiple unlock requests to its PAM handling subprocess, which tries to process all of them instead of stopping at the first success. (See e.g. run_pw_backend_child().) If my theory is correct, then building swaylock using either of #379 and #375 should prevent the described behavior.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants