Description of problem: GDM tells me the time of last login every time I log in, which only slows down the process. I believe https://github.com/pbrezina/authselect/blob/master/profiles/sssd/postlogin#L7 should include “silent” instead of “showfailed” by default. Version-Release number of selected component (if applicable): authselect-0.3.2-1.fc28.x86_64
I would change it to something like: session [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet session [default=1] pam_lastlog.so nowtmp showfailed {if "with-silent-lastlog":silent} session optional pam_lastlog.so silent noupdate showfailed I.e. if you call "authselect select sssd with-silent-lastlog" it will add silent parameter to it. This should be probably default for Fedora. Vendy, would it be possible to call authselect together with this parameter in Anaconda?
Hi Pavel, Anaconda calls authselect by default only to enable fingerprint authentication (if supported). That already caused some problems and Atomic had to find a workaround for it. Therefore, I don't want to do more changes to authselect usage in Anaconda at this point in the F28 cycle and would like to defer this to Fedora 29.
authselect-0.4-1.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5f37ac141
I fixed this by adding "with-silent-lastlog" parameter to the profiles, see [1]. I will release new version of authselect (0.4) in F28 and rawhide soon. I found a typo in anaconda's authselect call and I opened a pull request for it [2]. It also contain a commit that switch to "with-silent-lastlog" by default. Vendy, I would welcome if you accept also this commit since we need to touch the line anyway. Atomic complained only about nsswitch.conf and this is only trivial change in PAM that does not touch authentication itself. [1] https://github.com/pbrezina/authselect/commit/c10d8ec6f8350015e48a624470c5a5a419af807b [2] https://github.com/rhinstaller/anaconda/pull/1421
authselect-0.4-1.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-d5f37ac141
authselect-0.4-1.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.