zakuArbor/proxyAuth

As a user, I want to have no lag when trying to enter my password (not using bluetooth

Closed this issue · 5 comments

Remove the lag associated with the PAM when entering the password (i.e. when logging into the machine via password, there's a significant delay)

There is no delay when logging on if bluetooth is turned off because there's no bluetooth adapter to scan the devices in the area.

Solution: Change /etc/pam.d/gdm-password to use pam_unix.so before running our own PAM proxy.

#proxyAuth
password    [success=1 default=ignore]  pam_unix.so obscure sha512

auth sufficient pam_proxy.so
auth required pam_warn.so

Check on doc/week03/kim_log_3.md for more details

Commit 3ee80b79be941efbdb89797e9f90627b77e91583 resolved the issue

While working on #12 I noticed the issue has not been resolved. There is no longer lag to type in the password but there's still a wait period for the PAM to finish scanning.

Issue #5 is similar to this issue. Commit 33e9b16a080237556c2a316ab2176d9ab4d33fad hides the latency of bluetooth PAM (pam_proxy) by checking if the device is paired.

Commit 402f161a9d2ea22f253729af2082de3fe57b91e6 removed Bluetooth scanning. This was causing significant slowdown in login process and is a point of security concern as well since we don't authenticate the user but rather just scan the MAC address. Bluetooth scanning was done on purpose till we thought of a more secured form of authenticating bluetooth device and is now no longer needed. Checking if a trusted device is paired via Bluetooth is more secured and faster.