If a user first logs in to one ThinLinc system via smartcard or public key auth, and then starts a password-protected ThinLinc session via a web page, login will fail because the .tlclient file created by tlclient.cgi doesn't contain any statement telling the client to use password authentication. There's a quick workaround - you can edit tlclient.conf.webtemplate, but nevertheless, tlclient.cgi should probably add a statement telling the client to use password authentication when a password or hexpassword is present.
