RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Description of problem:

SSSD in 6.8 will have all the recent features like smart 2-factor authentication prompting and Smartcard PIN prompting.

To make those features visible to the user the changes from https://bugzilla.redhat.com/show_bug.cgi?id=1204864 are needed for 6.8 as well.

It would be nice if they changes can be backported to 6.8. If not the documentation has to be extended to explain how to do the changes manually.

Based on the PM input and given that we are rather late in the RHEL-6 cycle, we have decided to close the request as WONTFIX. Users requiring Smart Card support in SSSD will need to manually change PAM configuration to enable it (or move to RHEL-7.2+).

I will open a doc bug, to note the required PAM changes in official docs.