Skip to content

Handle sequential PAM prompts in greeter and locker - #502

Open
demesm wants to merge 2 commits into
pop-os:masterfrom
demesm:fix-multiple-pam-prompts
Open

Handle sequential PAM prompts in greeter and locker#502
demesm wants to merge 2 commits into
pop-os:masterfrom
demesm:fix-multiple-pam-prompts

Conversation

@demesm

@demesm demesm commented Jul 30, 2026

Copy link
Copy Markdown

After the first PAM response, COSMIC remained in the authenticating state, preventing later PAM prompts from becoming normally interactive.

  • I have disclosed use of any AI generated code in my commit messages.
    • If you are using an LLM, and do not fully understand the changes it is making to the code base, do not create a PR.
    • In our experience, AI generated code often results in overly complex code that lacks enough context for a proper fix or feature inclusion. This results in considerably longer code reviews. Due to this, AI authored or partially authored PRs may be closed without comment.
  • I understand these changes in full and will be able to respond to review comments.
  • My change is accurately described in the commit message.
  • My contribution is tested and working as described.
  • I have read the Developer Certificate of Origin and certify my contribution under its conditions.

Summary

  • Reset the authentication UI state when a new interactive PAM prompt arrives.
  • Apply the sequential-prompt fix to both the graphical greeter and session locker.

Testing

  • Tested on Fedora 44 with COSMIC.
  • mfa w/ Password + YubiKey + TOTP succeed through pamtester. Graphical login & unlock work with the fixes.

@demesm demesm changed the title Show input field for sequential PAM prompts Handle sequential PAM prompts in greeter and locker Jul 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant