Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-35781

Passkey errors when handling multiple altSecurityIdentities values

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • rhel-9.5
    • rhel-9.4
    • sssd
    • sssd-2.9.5-1.el9
    • None
    • Low
    • rhel-sst-idm-sssd
    • ssg_idm
    • 12
    • 14
    • 0
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • All
    • None

      What were you trying to do that didn't work?

      Add passkey and ssh key into altSecurityIdentities attribute.

      PAM debug logs show:

      (2024-05-03  4:58:25): [pam] [pam_passkey_get_user_done] (0x4000): CID#2 Processing passkey data
      (2024-05-03  4:58:25): [pam] [process_passkey_data] (0x0040): CID#2 talloc_strdup public key failed.
      (2024-05-03  4:58:25): [pam] [pam_passkey_get_user_done] (0x0040): CID#2 process_passkey_data failed: [12]: Cannot allocate memory
      (2024-05-03  4:58:25): [pam] [pam_passkey_get_user_done] (0x0040): CID#2 Unexpected passkey error [12]: Cannot allocate memory. Skipping passkey auth

      The issue observed while automating and now with IDM-CI is just to get,

      password prompt after su command taking almost 2 mins,

              rhn-support-jstephen Justin Stephenson
              rhn-support-jstephen Justin Stephenson
              SSSD Maintainers SSSD Maintainers
              Madhuri Upadhye Madhuri Upadhye
              Louise McGarry Louise McGarry
              Votes:
              0 Vote for this issue
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: