[fprint] Multiple fingerprints in pam_fprint

[Daniel Drake]

Ewgenij Starostin wrote:
> Hi!
> 
> I use a convertible notebook with an AES2501 device and, depending on
> whether I use it as a notebook or as a tablet, different fingers are
> more or less practical for authentication. Right now, pam_fprint seems
> to choose just one fingerprint for authentication.
> 
> Could this be done by changing the authentication logic to get some
> device, then get all fingerprints for it rather than just the first and
> call fp_identify_finger_img instead of fp_verify_finger? I’m uncertain
> about the difference in terms of security between those two functions.

Yes, this would be relatively easy to do. A good solution would be to 
have this configurable through a parameter specified in the pam config file.

Feel free to submit a patch or file a feature request bug. Patches 
preferable, as I don't know when I'll get to implementing this 
otherwise. pam_fprint is just a proof-of-concept and there's more 
important work to be done before I return to the realm of implementing 
decent fingerprint-based user authentication.

Thanks,
Daniel