From eb52470ae7344ecb51df9e2768f81575d7f71e00 Mon Sep 17 00:00:00 2001 From: Joan Torres Lopez Date: Tue, 11 Aug 2026 17:19:38 +0200 Subject: [PATCH] Update unified authentication patch to drop passkey/web auth settings The login-screen settings schema is only meant to enable or disable PAM auth services. Passkey and web authentication are specific auth roles already handled by the gdm-switchable-auth service, so drop their settings, per GNOME/gdm!379. Resolves: https://redhat.atlassian.net/browse/RHEL-236551 --- ...d-support-for-unified-authentication.patch | 53 +++++++++++++++++-- gdm.spec | 6 ++- 2 files changed, 55 insertions(+), 4 deletions(-) diff --git a/0001-data-Add-support-for-unified-authentication.patch b/0001-data-Add-support-for-unified-authentication.patch index fc2250c..bfa0434 100644 --- a/0001-data-Add-support-for-unified-authentication.patch +++ b/0001-data-Add-support-for-unified-authentication.patch @@ -1,7 +1,7 @@ From 4c3f937ec0b694819823ea3ffb0aea361b62976b Mon Sep 17 00:00:00 2001 From: Joan Torres Lopez Date: Thu, 18 Sep 2025 16:42:37 +0200 -Subject: [PATCH 1/2] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is +Subject: [PATCH 1/3] session: Log JSON request when GDM_DEBUG_JSON_REQUESTS is set This is only useful for debugging and testing. @@ -32,7 +32,7 @@ index 6f53b5dfa..2f820015c 100644 From a823f0f0fd3262770599d24de7efd0c2462ca61f Mon Sep 17 00:00:00 2001 From: Ray Strode Date: Mon, 22 Jan 2024 09:40:39 -0500 -Subject: [PATCH 2/2] data: Add support for unified authentication +Subject: [PATCH 2/3] data: Add support for unified authentication At the moment, every authentication mechanism gets its own separate PAM conversation. @@ -127,6 +127,53 @@ index 000000000..6648c3cec +session include switchable-auth +session optional pam_gnome_keyring.so auto_start +session include postlogin --- +-- 2.47.3 + +From 4df14596b9d9cbd82fd4a79a0decd70297a886d8 Mon Sep 17 00:00:00 2001 +From: Joan Torres Lopez +Date: Sat, 18 Jul 2026 18:17:07 +0200 +Subject: [PATCH 3/3] data: Drop passkey and web authentication settings + +The login-screen settings schema is only meant to enable or disable PAM +auth services. Passkey and web authentication are specific auth roles +already handled by the gdm-switchable-auth service. +--- + data/org.gnome.login-screen.gschema.xml | 20 -------------------- + 1 file changed, 20 deletions(-) + +diff --git a/data/org.gnome.login-screen.gschema.xml b/data/org.gnome.login-screen.gschema.xml +index 91e223dc5..6c2a0ad48 100644 +--- a/data/org.gnome.login-screen.gschema.xml ++++ b/data/org.gnome.login-screen.gschema.xml +@@ -16,26 +16,6 @@ + multiple authentication mechanisms via a GDM PAM. + + +- +- true +- +- Whether or not to allow authentication via external web site +- +- +- The login screen can optionally allow users to authenticate via +- web login. +- +- +- +- true +- +- Whether or not to allow authentication using a passkey +- +- +- The login screen can optionally allow users who have passkeys to log +- in using those passkeys. +- +- + + true + +-- +2.55.0 + diff --git a/gdm.spec b/gdm.spec index 57dc8b1..b41e379 100644 --- a/gdm.spec +++ b/gdm.spec @@ -11,7 +11,7 @@ Name: gdm Epoch: 1 Version: 40.1 -Release: 49%{?dist} +Release: 50%{?dist} Summary: The GNOME Display Manager License: GPLv2+ @@ -396,6 +396,10 @@ dconf update || : %{_libdir}/pkgconfig/gdm-pam-extensions.pc %changelog +* Tue Aug 18 2026 Joan Torres Lopez - 40.1-50 +- Update unified authentication patch to drop passkey/web auth settings + Resolves: https://redhat.atlassian.net/browse/RHEL-236551 + * Fri Aug 14 2026 Joan Torres Lopez - 40.1-49 - Fix crash in session-settings related with ActUser Resolves: https://redhat.atlassian.net/browse/RHEL-240874