From bab2107079687440d50e34e09ace1216f0d8a82d Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Tue, 17 Feb 2026 14:27:33 +0100
Subject: [PATCH] Fix reporting false failed authentication

Resolves: https://issues.redhat.com/browse/RHEL-86485
---
 ...port-service-unavailable-error-as-fa.patch | 50 +++++++++++++++++++
 gdm.spec                                      |  4 ++
 2 files changed, 54 insertions(+)
 create mode 100644 0001-session-Don-t-report-service-unavailable-error-as-fa.patch

diff --git a/0001-session-Don-t-report-service-unavailable-error-as-fa.patch b/0001-session-Don-t-report-service-unavailable-error-as-fa.patch
new file mode 100644
index 0000000..7037385
--- /dev/null
+++ b/0001-session-Don-t-report-service-unavailable-error-as-fa.patch
@@ -0,0 +1,50 @@
+From f04dc0418694b20f789479bfd1d88404fd0c5fde Mon Sep 17 00:00:00 2001
+From: Joan Torres Lopez <joantolo@redhat.com>
+Date: Fri, 12 Sep 2025 17:24:15 +0200
+Subject: [PATCH] session: Don't report service unavailable error as failed
+ authentication
+
+Service unavailable error happens when authentication is performed
+using gdm-fingerprint and fprintd service is terminated
+(either manually or from a timeout).
+
+In those cases, failed authentications were being reported, making the login
+greeter display something like:
+"There were <x> failed login attempts since the last successful login.".
+
+This fixes it.
+
+Part-of: <https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/317>
+---
+ daemon/gdm-session.c | 15 ++++++++++-----
+ 1 file changed, 10 insertions(+), 5 deletions(-)
+
+diff --git a/daemon/gdm-session.c b/daemon/gdm-session.c
+index ae6840188..46bd1da9d 100644
+--- a/daemon/gdm-session.c
++++ b/daemon/gdm-session.c
+@@ -259,11 +259,16 @@ on_authenticate_cb (GdmDBusWorker *proxy,
+         if (worked) {
+                 gdm_session_authorize (self, service_name);
+         } else {
+-                g_signal_emit (self,
+-                               signals[AUTHENTICATION_FAILED],
+-                               0,
+-                               service_name,
+-                               conversation->worker_pid);
++                if (!g_error_matches (error,
++                                      GDM_SESSION_WORKER_ERROR,
++                                      GDM_SESSION_WORKER_ERROR_SERVICE_UNAVAILABLE)) {
++                        g_signal_emit (self,
++                                       signals[AUTHENTICATION_FAILED],
++                                       0,
++                                       service_name,
++                                       conversation->worker_pid);
++                }
++
+                 report_and_stop_conversation (self, service_name, error);
+         }
+ }
+-- 
+2.52.0
+
diff --git a/gdm.spec b/gdm.spec
index 1a9bdd9..7d06eb4 100644
--- a/gdm.spec
+++ b/gdm.spec
@@ -59,6 +59,10 @@ Patch: 0001-session-record-Rework-wtmp-utmp-btmp-fields.patch
 # https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/330
 Patch:          0001-data-Add-support-for-unified-authentication.patch
 
+# RHEL-86485
+# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/317
+Patch:          0001-session-Don-t-report-service-unavailable-error-as-fa.patch
+
 BuildRequires:  dconf
 BuildRequires:  desktop-file-utils
 BuildRequires:  gettext-devel