Login very slow

[py9mrg]

Hello,

When logging in there is a long (~20 to 30 second) delay from entering my password to logging in actually happening. Or rejection is password mistyped.

[mxj4]

Might be an upstream regression, recently tried aurora 44 and same issue.

[kasraghu]

Check if you have fingerprint enabled with authselect current and remove it. Disable it in DMS settings as well.

[py9mrg]

I have that setting off already - although when it's on it doesn't seem to do anything.

I do have fingerprint enabled in general but it doesn't work on first login, only after logging in and back out, then trying again. But then it works fast both with fingerprint and password. I would prefer to fix the issue rather than remove fingerprint as a login option, if that's possible? And if it fixes the inability to login with fingerprint on first login, even better!

[kasraghu]

By removing it from authselect. You disable it everywhere. Authselect and DMS are adding separate lines to PAM.

By using DMS you can enable it just for Lock Screen or for Login ( Greeter) as well.

[kasraghu]

I have also enabled fingerprint for sudo commands by adding auth sufficient pam_fprintd.so to /etc/pam.d/sudo

❯ cat /etc/pam.d/sudo
#%PAM-1.0
auth       sufficient   pam_fprintd.so
auth       include      system-auth
account    include      system-auth
password   include      system-auth
session    optional     pam_keyinit.so revoke
session    required     pam_limits.so
session    include      system-auth

[py9mrg]

Ok so, interestingly I noticed that - before making any changes - at first login, if I entered my password and then placed my finger on the reader it would login instantly instead of the 30 second delay. So presumably there's something conflicting going on in the background.

Then I tried your advice and, indeed, removing fingerprint from authselect solves the issue and first login is immediate. I also added fingerprint to pam.d as advised to get sudo back working.

However, now, even with fingerprint enabled in both the login and greeter DMS options, fingerprint now does work for either first login or having logged in, back out, and then tried to login again.

Edit: noticed in DMS setting that when clicking Greeter status I get the following:

Sync doesn't do anything but if I run dms auth sync it appears to work - but doesn't resolve the issue and I still get the same user status warning.

[kasraghu]

However, now, even with fingerprint enabled in both the login and greeter DMS options, fingerprint now does work for either first login or having logged in, back out, and then tried to login again.

Sorry, I did not understand this sentence.

[py9mrg]

Sorry I'm not being very clear. Let me try to re-summarise where I am:

Before making your recommended changes above:

• after a full shutdown or reboot, if I enter the correct password there's a long delay before actual login happens
• if I log out and then back in, the second log-in has no delay
• (subsequent discovery) - even after a full shutdown or reboot, from the log-in screen, if I simply hit enter (no password entry) and then place my finger on the reader, log-in happens with no delay

After making your recommended changes

• there is no log-in delay in any situation, including after full shutdown / reboot
• however, fingerprint reader doesn't work at all for log-in, regardless of what dms settings I choose, or if I run dms auth sync and I always get the warning in the settings menu shown in the screenshot above

Currently I've reverted all settings and now using the "trick" of simply pressing enter at the log-in screen then placing my finger on the reader.

[kasraghu]

I am not sure what is the cause for your issue is.
It's better to add your $USER to greeter group.
Run zjust check-local-overrides | grep "/etc/pam.d" to see what changed in your conf files.