-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 28 Jan 2023 09:57:53 +0100 Source: gdm3 Built-For-Profiles: noudeb Architecture: source Version: 43.0-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Marco Trevisan (Treviño) <marco@ubuntu.com> Launchpad-Bugs-Fixed: 1999884 Changes: gdm3 (43.0-2) unstable; urgency=medium . * debian/gdm3-gdm-smartcard*: Do not fail if pam_succeed_if suceeded. We were not handling the success case in pam_succeed_if.so, and so even if other modules were successful, gdm-smartcard was failing with a permission denied error, because the pam_succeed_if default was bad, and this was applied to the success case too. Alternatively we could even just use success=ignore here, but it's better to be consistent with other usages. (LP: #1999884) * debian/gdm3.gdm-smartcard-sssd-or-password.pam: Always load gnome keyring and nologin. Ensure that we load the nologin and gnome-key-ring modules also if sss module succeeded. * debian/tests: Add autopkg tests testing gdm smartcard authentication. Create fake certificates from fake CA's and verify they can be used with from a virtual smartcard. Checksums-Sha1: 113e5903aa396ba521b59ae5c8567ab4d1d93cb6 3076 gdm3_43.0-2.dsc b17b73c35ddb23cffd150fee9663b82656b941b4 81804 gdm3_43.0-2.debian.tar.xz 881c622e975f422c15c98d267913feb9f2e6ba01 19927 gdm3_43.0-2_source.buildinfo Checksums-Sha256: 1783a2e09a29d4fa3f896a8057327a2c8f4c77fdcffadc309e0b6d5d6312065b 3076 gdm3_43.0-2.dsc 407f2d674ced9e4f8ba698e0b9a906b5852ec71cacaef2640142692ff1b37041 81804 gdm3_43.0-2.debian.tar.xz dfa36f1eb44ea53ef39de9be2ea35bec1c27bd8ff7c0e994fffaf1fb36f21f58 19927 gdm3_43.0-2_source.buildinfo Files: 8fb52e87062a5d9bdedd6101e19c244c 3076 gnome optional gdm3_43.0-2.dsc d43604b6ae5e043acb892069a683348c 81804 gnome optional gdm3_43.0-2.debian.tar.xz a094cddc14c1e16403da3521e0e41e0d 19927 gnome optional gdm3_43.0-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE1MUB2kjreXoIF1CTlEnC9QmWY18FAmPU46sACgkQlEnC9QmW Y18hChAAkguthuMbWVhMFJ8yeyqERKeBx10mlll3ujcptdbDWwg2cB9d/fbsqKP0 WbuEHCu4Lqj/d2xZJ2N3JSs0lzE7BbU3D71ypJQmoJZXuOCW7cgBPxDFweF2TqgE N67a+Bxjx+vYW9q270Sh2dyVDhWd2ilOlww5zcZ6hoUggce4ejLq3214OpJ6e5Q5 EpA31SclKM8YGIB3VndSE6HbEki6sHHvXcmwO1EdIh9Sp2w5LCiRWhK7wRtkXu7c GrLUEWyI0afoDOSBVKwI2rRfJNSCpFPsB86qR5bYNfpI6C/YtunM8G3Gr8tWHKal uM7+6kPwZBzJBybewzKaa+5XqRjVDRBZeDRsApg9eCSO44GzFTaAqQNyQaYbtnba Tl9kyXJZVGUuTQEXstrdbIyszjQLr9PcqxSywZx1SvTsyUf6NSNHcFVOf1GLPUqa iW277ha+x/SMxgz1ZUWbxnAKq8JS7lsZ22x8PCWikEBPtZ613Zek6tsdETl35I1k ve5HAWYqUrM0XKRvl+bwQIrkhY+F5geU82lLInDH95muK5FFqsE2omnc6+J/snp2 xd9VsHpdhhwXvsCx/6yd3Ais/h4/S1QeacvqEMmkiJUmfnvzMP9rwzvebI+tpXkC sthGPThJvpWqXfT7wCSCvj+jCRp9escIGltDtmnx43+o9j72m/s= =A5Wn -----END PGP SIGNATURE-----