[beta - AUR] adding `auth sufficient pam_unix.so try_first_pass likeauth nullok` above `auth sufficient /lib/security/pam_howdy.so` stops howdy from functioning

[sylvesterroos]

Please describe the issue in as much detail as possible, including any errors and traces. If your issue is a camera issue, be sure to also post the image generated by running sudo howdy snapshot.

I'm following the installation instructions on the arch wiki, but howdy stops working when adding auth sufficient pam_unix.so try_first_pass likeauth nullok to the top of my pam file. Here is my sudo configuration:

#%PAM-1.0

# howdy - use either a password or face in a graphical interface
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient /lib/security/pam_howdy.so

auth		include		system-auth
account		include		system-auth
session		include		system-auth

I can enter my password and sudo will function as normal, but when I enter a wrong password it switches to howdy which will then not turn on the IR camera to capture my face. If I remove auth sufficient pam_unix.so try_first_pass likeauth nullok to make it always use howdy instead of a password it works as expected.

---

I've searched for similar issues already, and my issue has not been reported yet.

Linux distribution (EndeavourOS):

Howdy version (Howdy 3.0.0 BETA):

[megawebmaster]

I have the same issue in Arch and I suspect this requires some changes in pam_howdy, so that it allows you to use password instead of face recognition (or at least drops to password if face was not detected instead of looping).