VMware Horizon agent Single Sign On not working with Authentication Services installed on Linux (4271230)

VMware Horizon agent Single Sign On not working with Authentication Services installed on Linux

VMware Horizon agent creates the following PAM file:
gdm-vmwcred

When using VMware Horizon to connect to the Linux server a password is requested.
Expected results are for a Single Sign on to occur.

The Authentication services PAM modules do not receive the credentials from the VMware Horizon PAM module.
An Enhancement request has been raised to resolve this issue.

STATUS:
Enhancement request 240627 has been submitted to Development for consideration in a future release of Authentication services.



WORKAROUND:
Add the 'try_first_pass' option to the pam_vas auth entry.

For example on Ubuntu the gdm-vmwcred file will include common-auth:
@include common-auth

The current auth entry for pam_vas in the common-auth file is:
auth    sufficient      pam_vas3.so create_homedir get_nonvas_pass

Add the 'try_first_pass' option to the end of this line so that you now have:
auth    sufficient      pam_vas3.so create_homedir get_nonvas_pass try_first_pass

240627