SSSD / sssd

#4051 Smart Card auth of local user: endless loop if wrong PIN was provided
Closed: Fixed by atikhonov. Opened by atikhonov.

Closed: Fixed
Reopen Issue

When I enter wrong PIN:

$ su certtets
PIN for test
^C

^^^ from user point of view everything seems to be hung.

Meantime sssd_pam & p11_child are in endless(?) loop trying to Login to (already locked) SC.

Issue seems to appear if try_cert_auth or require_cert_auth options are used.

Metadata Update from @atikhonov:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1736265

Metadata Update from @sbose:
- Issue assigned to sbose

PR: https://github.com/SSSD/sssd/pull/862

Metadata Update from @sbose:
- Custom field patch adjusted to on

Commit 5574de0f relates to this ticket
  • master: 5574de0f87e72d85547add9a48f9ac0def27f47d

Metadata Update from @jhrozek:
- Issue set to the milestone: SSSD 2.3

Metadata Update from @atikhonov:
- Custom field design_review adjusted to on
- Custom field mark adjusted to on
- Custom field review adjusted to on
- Custom field sensitive adjusted to on
- Custom field testsupdated adjusted to on
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5019

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata

bug

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.