[fprint] fpring, gentoo and kdm

[Konstantin V. Gavrilenko]

Hi Michele,

nice solution.
btw, it also works better with konsole, when you open a session profile with multiple "su -",
the fingerprinting device does not get blocked by the first root konsole asking for the fingerprint.


yours,
kos

-------- Original Message  --------
Subject: [fprint] fpring, gentoo and kdm
From: Michele Caini <skypjack at gmail.com>
To: fprint at reactivated.net
Date: 13/01/09 15:08

> Hi all,
> I'm a new user of fprint.
> 
> Thanks a lot for this very useful software, really! :-)
> I use your software on Gentoo with tuxonice patched kernel
> (tuxonice-sources) version 2.6.28, into a kde-based system.
> 
> I've installed fprint-demo version 0.4, libfprint version 0.0.5 and
> pam_fprint version 0.2. I cant't use up-to-date version of libfprint
> because I'm using gcc 4.1.2, and for libfprint since version 0.0.6 gcc
> version 4.1.3 at least is needed.
> About pam_fprint, I think configuration proposed on web site
> (http://www.reactivated.net/fprint/wiki/Pam_fprint) is wrong for me and,
> maybe, for someone.
> That is, using this configuration:
> 
> auth       required pam_env.so
> auth       sufficient   pam_fprint.so
> auth       sufficient   pam_unix.so try_first_pass likeauth nullok
> auth       required pam_deny.so
> 
> I'm not able to login using password because finger check request comes
> anyway and locks (I don't know why) kdm or shell login, ignoring
> submitted password in former case and preventing password submission in
> latter case.
> 
> A very simple solution exists and consists of using this configuration:
> 
> auth       required pam_env.so
> auth       sufficient   pam_unix.so try_first_pass likeauth nullok
> auth       sufficient   pam_fprint.so
> auth       required pam_deny.so
> 
> In that case, it will came first a password request, and if any password
> will be submitted (that is, return has been pressed) it will come a
> request for finger check. Finger check, however, freezes system while
> someone else offers his finger! Wrong password and subsequent wrong
> finger check works fine and it brings back user to the password prompt.
> 
> That's all. Your configuration doesn't work for me, I hope my solution
> can help you and anyone has my same problem.
> 
> 
> Regards,
> Michele Caini
> _______________________________________________
> fprint mailing list
> fprint at reactivated.net
> http://lists.reactivated.net/mailman/listinfo/fprint


-- 
Yours sincerely,
Konstantin V. Gavrilenko

Managing Director
Arhont Information Security Ltd

web:    http://www.arhont.com
        http://www.wi-foo.com
e-mail: k.gavrilenko at arhont.com

tel: +44 (0) 870 44 31337
fax: +44 (0) 208 429 3111

PGP: Key ID - 0xE81824F4
PGP: Server - keyserver.pgp.com