Disabling login form (exclusively using certificate login)

[Aeris1One]

Hello,
I'm trying to fully disable the username/password login form on Cockpit, as I would like to only use smartcard authentication.
Even with basic and negotiate disabled the login form is still shown when no certificate is provided, despite not being able to login when those two options are disabled.

Is it possible to show an error page "No certificate provided" / "The certificate you provided is invalid" instead of falling back to a login form ?

[jelly]

Thanks for the detailed question, I've never setup smartcard auth but following our documentation I can conclude that the login page is indeed not aware of smartcart mode.

From reading the code we try authenticate when loading Cockpit and when this fails we indeed load the login page which does not know anything about the login failure.

I would conclude that it would be great if we would properly support a smartcard-only mode and showed a useful error message. But I fear it might not be super trivial.

[Venefilyn]

Weren't we adding custom login pages? Wouldn't that solve this issue? Not followed it fully to know what it does

[jelly]

We are working on a custom login page but that wouldn't help make the default workflow work nicely out of the box nor handle errors in a good way.