SSSD / sssd

#3560 Improve Smartcard integration if multiple certificates or multiple mapped identities are available
Closed: Fixed Opened by sbose.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1507614

+++ This bug was initially created as a clone of Bug #1413900 +++
Description of problem:
Currently GDM Smartcard integration works great if the Smartcard contains only
one certificate valid for authentication which is mapped to a single user.
But there are valid use cases where either multiple certificates valid for
authentication are on the Smartcard or where a single certificate is mapped to
multiple users. Please see
https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardsAndMultipleIdentities
for details.
While it would be possible for SSSD to handle the needed prompting it would imo
improve the user experience if GDM can handle some of the prompting in a more
appealing way.

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1507614

Metadata Update from @sbose:
- Issue assigned to sbose

master:

  • 57cefea8305a57c1c0491afb739813b7f17d5a25
  • 177ab84f0e336b75289a3ac0b2df25bd5ab5198b
  • 08d1f8c0d6eece6a48201d7f8824b282eac3458d
  • fd6f4047b58686bd4057c9859c3c804a77b136d8
  • 06c2300353faf3983e38fecb1d6afe1f6cc8fe32
  • 0a8024af282b271ad2185f68703d9f4e766d2bdc
  • 122830e67472390b41edc73f0cfcd5c5705b726b
  • 0bdd8800c16f39b8fe308d20694ad905c669dff3
  • 39fd336e4390ece3a8465714735ef4203f329e54

Metadata Update from @lslebodn:
- Issue set to the milestone: None

Metadata Update from @lslebodn:
- Issue close_status updated to: Fixed
- Issue set to the milestone: SSSD 1.16.1
- Issue status updated to: Closed (was: Open)

Metadata Update from @jhrozek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1507614, https://bugzilla.redhat.com/show_bug.cgi?id=1523010 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1507614)

Issue linked to Bugzilla: Bug 1523010

master:

  • 2297cc7d6cd5c38a7d64027165e4e82ca497f418

This patch was reverted in commit c221b5fb4d3fc511cebcae2f042e43fb1c577bc7
Edited by lslebodn

master:

  • 787ba9c882f1d7ff9ea4f2745e779c5fb04dfafc

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4585

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
https://bugzilla.redhat.com/show_bug.cgi?id=1507614, https://bugzilla.redhat.com/show_bug.cgi?id=1523010
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.