Skip to content

libfido2 needed as dependency for passkey support

Description:

Despite passing --with-passkey to ./configure, without having libfido2 as a dependency the final package will be missing the files required for passkey support in sssd and using the sssctl passkey-exec command will fail.

Additional info:

sssd version 2.11.1-1

Steps to reproduce:

Building the package in a chroot, with the only difference being libfido2 being added to the depends array results in the needed files being included in the final package, including:

-rwxr-xr-x root/root 38888 2025-08-24 19:23 usr/lib/sssd/modules/sssd_krb5_passkey_plugin.so

-rwxr-xr-x root/root 55312 2025-08-24 19:23 usr/lib/sssd/sssd/passkey_child

-rw-r--r-- root/root 396 2025-08-24 19:23 usr/share/sssd/krb5-snippets/sssd_enable_passkey

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information