Update unified authentication patch to drop passkey/web auth settings

The login-screen settings schema is only meant to enable or disable
PAM auth services. Passkey and web authentication are specific auth
roles already handled by the gdm-switchable-auth service, so drop
their settings, per GNOME/gdm!379.

Resolves: https://redhat.atlassian.net/browse/RHEL-236551
This commit is contained in:
Joan Torres Lopez 2026-08-11 17:19:38 +02:00
parent f85168c2c5
commit eb52470ae7
No known key found for this signature in database
2 changed files with 55 additions and 4 deletions

View File

@ -1,7 +1,7 @@
From 4c3f937ec0b694819823ea3ffb0aea361b62976b Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Thu, 18 Sep 2025 16:42:37 +0200
Subject: [PATCH 1/2] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
Subject: [PATCH 1/3] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is
set
This is only useful for debugging and testing.
@ -32,7 +32,7 @@ index 6f53b5dfa..2f820015c 100644
From a823f0f0fd3262770599d24de7efd0c2462ca61f Mon Sep 17 00:00:00 2001
From: Ray Strode <rstrode@redhat.com>
Date: Mon, 22 Jan 2024 09:40:39 -0500
Subject: [PATCH 2/2] data: Add support for unified authentication
Subject: [PATCH 2/3] data: Add support for unified authentication
At the moment, every authentication mechanism gets its own
separate PAM conversation.
@ -127,6 +127,53 @@ index 000000000..6648c3cec
+session include switchable-auth
+session optional pam_gnome_keyring.so auto_start
+session include postlogin
--
--
2.47.3
From 4df14596b9d9cbd82fd4a79a0decd70297a886d8 Mon Sep 17 00:00:00 2001
From: Joan Torres Lopez <joantolo@redhat.com>
Date: Sat, 18 Jul 2026 18:17:07 +0200
Subject: [PATCH 3/3] data: Drop passkey and web authentication settings
The login-screen settings schema is only meant to enable or disable PAM
auth services. Passkey and web authentication are specific auth roles
already handled by the gdm-switchable-auth service.
---
data/org.gnome.login-screen.gschema.xml | 20 --------------------
1 file changed, 20 deletions(-)
diff --git a/data/org.gnome.login-screen.gschema.xml b/data/org.gnome.login-screen.gschema.xml
index 91e223dc5..6c2a0ad48 100644
--- a/data/org.gnome.login-screen.gschema.xml
+++ b/data/org.gnome.login-screen.gschema.xml
@@ -16,26 +16,6 @@
multiple authentication mechanisms via a GDM PAM.
</description>
</key>
- <key name="enable-web-authentication" type="b">
- <default>true</default>
- <summary>
- Whether or not to allow authentication via external web site
- </summary>
- <description>
- The login screen can optionally allow users to authenticate via
- web login.
- </description>
- </key>
- <key name="enable-passkey-authentication" type="b">
- <default>true</default>
- <summary>
- Whether or not to allow authentication using a passkey
- </summary>
- <description>
- The login screen can optionally allow users who have passkeys to log
- in using those passkeys.
- </description>
- </key>
<key name="enable-fingerprint-authentication" type="b">
<default>true</default>
<summary>
--
2.55.0

View File

@ -11,7 +11,7 @@
Name: gdm
Epoch: 1
Version: 40.1
Release: 49%{?dist}
Release: 50%{?dist}
Summary: The GNOME Display Manager
License: GPLv2+
@ -396,6 +396,10 @@ dconf update || :
%{_libdir}/pkgconfig/gdm-pam-extensions.pc
%changelog
* Tue Aug 18 2026 Joan Torres Lopez <joantolo@redhat.com> - 40.1-50
- Update unified authentication patch to drop passkey/web auth settings
Resolves: https://redhat.atlassian.net/browse/RHEL-236551
* Fri Aug 14 2026 Joan Torres Lopez <joantolo@redhat.com> - 40.1-49
- Fix crash in session-settings related with ActUser
Resolves: https://redhat.atlassian.net/browse/RHEL-240874