In recent versions of Ubuntu and Ubuntu-based OS’s, there is this annoying bug with Gnome Display Manager where if you have a smartcard inserted it won’t let you log in via anything but pam_sss until you pull the card out (see Bug #1933027 “Gdm3 with smartcard asks for login/smartcard pin e...” : Bugs : gdm3 package : Ubuntu). I’ve tried to update-alternatives to allow for sssd or password login, but as others appear to be experiencing that isn’t working (see authentication - Disable Smartcard Integration in Hirsute? - Ask Ubuntu).
I’m quite attracted to the notion of smartcard login, but have found the pam_p11/poldi way suggested in the Nitrokey documentation to be too unstable. When we were using it in the office it had loads of times where the key wasn’t properly registering and causing staff to lock their keys.
I have access to Nitrokey Pro2, Nitrokey Key FIDO U2F, Nitrokey FIDO2, and Nitrokey Storage. Do any of these support pam_sss?
Given that Nitrokey ships Nitropads running these later versions of Ubuntu I’m hoping you guys have been able to work this out, by either allowing pam_sss login or finding a workable workaround. Any advice would be much appreciated.