From 984132909bd9f1089740dd287032402c36549ecf Mon Sep 17 00:00:00 2001 From: Joan Torres Lopez Date: Thu, 6 Aug 2026 12:07:52 +0200 Subject: [PATCH] Update unified authentication patch to drop passkey/web auth settings The login-screen settings schema is only meant to enable or disable PAM auth services. Passkey and web authentication are specific auth roles already handled by the gdm-switchable-auth service, so drop their settings, per GNOME/gdm!379. Resolves: RHEL-232978 --- ...d-support-for-unified-authentication.patch | 54 +++++++++++++++++-- gdm.spec | 3 +- 2 files changed, 53 insertions(+), 4 deletions(-) diff --git a/0001-data-Add-support-for-unified-authentication.patch b/0001-data-Add-support-for-unified-authentication.patch index e9d1c4e..5420e97 100644 --- a/0001-data-Add-support-for-unified-authentication.patch +++ b/0001-data-Add-support-for-unified-authentication.patch @@ -1,7 +1,7 @@ From 68976aadfb6c311196012439d97094c8244cdc49 Mon Sep 17 00:00:00 2001 From: Joan Torres Lopez Date: Thu, 18 Sep 2025 16:42:37 +0200 -Subject: [PATCH 1/3] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is +Subject: [PATCH 1/4] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is set This is only useful for debugging and testing. @@ -32,7 +32,7 @@ index 388b0d037..9affbc438 100644 From bb975dec28884e371a5a54ae524315b8b7a7ea13 Mon Sep 17 00:00:00 2001 From: Ray Strode Date: Mon, 22 Jan 2024 09:40:39 -0500 -Subject: [PATCH 2/3] data: Add support for unified authentication +Subject: [PATCH 2/4] data: Add support for unified authentication At the moment, every authentication mechanism gets its own separate PAM conversation. @@ -133,7 +133,7 @@ index 000000000..6648c3cec From c18c8201c4d2af24b7aaf2168a3428fea542c733 Mon Sep 17 00:00:00 2001 From: Joan Torres Lopez Date: Thu, 12 Feb 2026 18:12:01 +0100 -Subject: [PATCH 3/3] session: Use g_once for GDM_DEBUG_JSON_REQUESTS environment +Subject: [PATCH 3/4] session: Use g_once for GDM_DEBUG_JSON_REQUESTS environment variable check Part-of: @@ -163,3 +163,51 @@ index 5f103eddb..5c04ad1be 100644 -- 2.52.0 +From 4df14596b9d9cbd82fd4a79a0decd70297a886d8 Mon Sep 17 00:00:00 2001 +From: Joan Torres Lopez +Date: Sat, 18 Jul 2026 18:17:07 +0200 +Subject: [PATCH 4/4] data: Drop passkey and web authentication settings + +The login-screen settings schema is only meant to enable or disable PAM +auth services. Passkey and web authentication are specific auth roles +already handled by the gdm-switchable-auth service. + +Part-of: +--- + data/org.gnome.login-screen.gschema.xml | 20 -------------------- + 1 file changed, 20 deletions(-) + +diff --git a/data/org.gnome.login-screen.gschema.xml b/data/org.gnome.login-screen.gschema.xml +index 91e223dc5..6c2a0ad48 100644 +--- a/data/org.gnome.login-screen.gschema.xml ++++ b/data/org.gnome.login-screen.gschema.xml +@@ -16,26 +16,6 @@ + multiple authentication mechanisms via a GDM PAM. + + +- +- true +- +- Whether or not to allow authentication via external web site +- +- +- The login screen can optionally allow users to authenticate via +- web login. +- +- +- +- true +- +- Whether or not to allow authentication using a passkey +- +- +- The login screen can optionally allow users who have passkeys to log +- in using those passkeys. +- +- + + true + +-- +2.51.0 + diff --git a/gdm.spec b/gdm.spec index 67febb0..ccd54ba 100644 --- a/gdm.spec +++ b/gdm.spec @@ -59,9 +59,10 @@ Patch: 0001-manager-Schedule-deferred-plymouth-quit-on-session-r.patch # https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/335 Patch: 0001-session-record-Rework-wtmp-utmp-btmp-fields.patch -# RHEL-14524 # Passwordless work +# RHEL-14524 + RHEL-232980 # https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/330 +# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/379 Patch: 0001-data-Add-support-for-unified-authentication.patch # RHEL-86485