Hi,
Ahh, okay.
On Tue, Mar 2, 2021 at 9:31 AM Hans de Goede <hdegoede(a)redhat.com> wrote:
sudo authselect select minimal
sudo authselect apply-changes
Which results in the following /etc/pam.d/fingerprint-auth file:
[hans@x1 linux]$ sudo cat /etc/pam.d/fingerprint-auth
# Generated by authselect on Tue Mar 2 15:24:53 2021
# Do not modify this file manually.
Ahhh, okay. So authselect is supposed to be writing out dconf files to set
org.gnome.login-screen enable-password-authentication false
in /etc when it neuters the fingerprint-auth stack. Can you file a bug?
There might also be some pam magic we could do to force it to return
AUTHINFO_UNAVAIL in that case and then
gnome-shell would DoTheRightThing(tm) even without the dconf change.
--Ray