Update unified authentication patch to drop passkey/web auth settings

The login-screen settings schema is only meant to enable or disable
PAM auth services. Passkey and web authentication are specific auth
roles already handled by the gdm-switchable-auth service, so drop
their settings, per GNOME/gdm!379.

Resolves: RHEL-232978
This commit is contained in:
Joan Torres Lopez 2026-08-06 12:07:52 +02:00
parent add6e55332
commit 984132909b
No known key found for this signature in database
2 changed files with 53 additions and 4 deletions

View File

@ -1,7 +1,7 @@
From 68976aadfb6c311196012439d97094c8244cdc49 Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Thu, 18 Sep 2025 16:42:37 +0200
Subject: [PATCH 1/3] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
Subject: [PATCH 1/4] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
set
This is only useful for debugging and testing.
@ -32,7 +32,7 @@ index 388b0d037..9affbc438 100644
From bb975dec28884e371a5a54ae524315b8b7a7ea13 Mon Sep 17 00:00:00 2001
From: Ray Strode <rstrode@redhat.com>
Date: Mon, 22 Jan 2024 09:40:39 -0500
Subject: [PATCH 2/3] data: Add support for unified authentication
Subject: [PATCH 2/4] data: Add support for unified authentication
At the moment, every authentication mechanism gets its own
separate PAM conversation.
@ -133,7 +133,7 @@ index 000000000..6648c3cec
From c18c8201c4d2af24b7aaf2168a3428fea542c733 Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Thu, 12 Feb 2026 18:12:01 +0100
Subject: [PATCH 3/3] session: Use g_once for GDM_DEBUG_JSON_REQUESTS environment
Subject: [PATCH 3/4] session: Use g_once for GDM_DEBUG_JSON_REQUESTS environment
variable check
Part-of: <https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/353>
@ -163,3 +163,51 @@ index 5f103eddb..5c04ad1be 100644
--
2.52.0
From 4df14596b9d9cbd82fd4a79a0decd70297a886d8 Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Sat, 18 Jul 2026 18:17:07 +0200
Subject: [PATCH 4/4] data: Drop passkey and web authentication settings
The login-screen settings schema is only meant to enable or disable PAM
auth services. Passkey and web authentication are specific auth roles
already handled by the gdm-switchable-auth service.
Part-of: <https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/379>
---
data/org.gnome.login-screen.gschema.xml | 20 --------------------
1 file changed, 20 deletions(-)
diff --git a/data/org.gnome.login-screen.gschema.xml b/data/org.gnome.login-screen.gschema.xml
index 91e223dc5..6c2a0ad48 100644
--- a/data/org.gnome.login-screen.gschema.xml
+++ b/data/org.gnome.login-screen.gschema.xml
@@ -16,26 +16,6 @@
multiple authentication mechanisms via a GDM PAM.
</description>
</key>
- <key name="enable-web-authentication" type="b">
- <default>true</default>
- <summary>
- Whether or not to allow authentication via external web site
- </summary>
- <description>
- The login screen can optionally allow users to authenticate via
- web login.
- </description>
- </key>
- <key name="enable-passkey-authentication" type="b">
- <default>true</default>
- <summary>
- Whether or not to allow authentication using a passkey
- </summary>
- <description>
- The login screen can optionally allow users who have passkeys to log
- in using those passkeys.
- </description>
- </key>
<key name="enable-fingerprint-authentication" type="b">
<default>true</default>
<summary>
--
2.51.0

View File

@ -59,9 +59,10 @@ Patch: 0001-manager-Schedule-deferred-plymouth-quit-on-session-r.patch
# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/335
Patch: 0001-session-record-Rework-wtmp-utmp-btmp-fields.patch
# RHEL-14524
# Passwordless work
# RHEL-14524 + RHEL-232980
# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/330
# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/379
Patch: 0001-data-Add-support-for-unified-authentication.patch
# RHEL-86485