# Gdm and smartcard authentication on 9.0 **URL:** \ **Category:** Rocky Linux Help & Support\ **Created:** [October 31, 2022, 1:03pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712 "2022-10-31T13:03:51Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![BiloxiGeek](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/biloxigeek/32/1774_2.png) [@BiloxiGeek](https://forums.rockylinux.org/u/BiloxiGeek)\ **Post date:** [October 31, 2022, 1:03pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/1 "2022-10-31T13:03:51Z")
I run a freeipa domain locally. I’ve used the ipa-advise uttility to generate a script that sets up a system to allow smartcard authentication through gdm or at the console. This had not worked a few months ago but tried it again today and seems go to go now at least on an RL8.6 system. Just tried the same script on a RL9.0 system and it would not let me login using smartcard auth. Anyone know what might have changed to cause this? ADDED: I’ve tried that script on a handful of other 8.6 systems and they won’t let me authenticate through GDM with a smartcard/pin. So I’ve got one 8.6 system that is working but the others won’t. The config on them all should be identical. ---
**Author:** ![BiloxiGeek](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/biloxigeek/32/1774_2.png) [@BiloxiGeek](https://forums.rockylinux.org/u/BiloxiGeek)\ **Post date:** [November 3, 2022, 8:31pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/2 "2022-11-03T20:31:20Z")
I should mention that smartcard authentication does work for resources accessed over the web and in thunderbird. The basic access to the smartcard is okay. This problem only seems to be with authentication at the console or via GDM so far. ---
**Author:** ![gerry666uk](https://avatars.discourse-cdn.com/v4/letter/g/dbc845/32.png) [@gerry666uk](https://forums.rockylinux.org/u/gerry666uk)\ **Post date:** [November 3, 2022, 9:15pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/3 "2022-11-03T21:15:13Z")
When you log in using GDM, you will see a lot of log entries, including smart cards and fingerprint readers. ---
**Author:** ![BiloxiGeek](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/biloxigeek/32/1774_2.png) [@BiloxiGeek](https://forums.rockylinux.org/u/BiloxiGeek)\ **Post date:** [November 4, 2022, 1:36pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/4 "2022-11-04T13:36:21Z")
Yes I do, but none of what I do see indicates a problem or misconfiguration. ---
**Author:** ![BiloxiGeek](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/biloxigeek/32/1774_2.png) [@BiloxiGeek](https://forums.rockylinux.org/u/BiloxiGeek)\ **Post date:** [November 7, 2022, 4:57pm UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/5 "2022-11-07T16:57:55Z")
Did some more testing on a newly installed 8.6 system. My account can login using smartcard on the console and through GDM. Another admin can login on the console but not through GDM. The only indication we’re seeing of any failure is a cryptic entry in /var/log/messages: ```auto Nov 7 09:30:18 lafayette krb5_child[17585]: Can't verify certificate ``` Googled for krb5\_child and “can’t verify certificate” comes up with nothing. A little more searching indicated that krb5-pkinit was a problem. Removed that from an 8.6 system and smartcard auth starts working as expected. Tried it on a 9.0 system and dnf wanted to remove some ipa, sssd and python packages. Removed just the krb5-pkinit package with rpm and smartcard auth starts working as expected. I suspect that at some time in the future an update is gonna reinstall the krb5-pkinit package and break smartcard authentication. Can anyone shed some light on what it is in that package that is causing this problem? Perhaps there’s a config that can be set somewhere so the package can be installed but not block smartcard authentication. ---
**Author:** ![brian](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/brian/32/5777_2.png) [@brian](https://forums.rockylinux.org/u/brian)\ **Post date:** [August 25, 2023, 3:35am UTC](https://forums.rockylinux.org/t/gdm-and-smartcard-authentication-on-9-0/7712/6 "2023-08-25T03:35:14Z")