You have to use fprintd and for pam pam_fprintd.so. This works for me (X220t) but does have some 'features' you might not want to have.
e.g. you cannot stop the fprintd authentication with ^C and fallback to password, you have to wait for the (unconfigurable) timeout (very annoying over ssh). also, you can store your fingerprint with the fprintd-enroll command, but this does not need a password. This means: ANYONE can just store HIS fingerprint under your account by opening a terminal with fprintd-enroll, and then execute sudo or whatever pam-auth program. -> we should require the user's password to update the users fingerprint. next, you can only enroll the index finger on pam-password-prompt, no config option here as well. at last, i cant find a manpage about /etc/fprintd.conf, what are possible config options? and no, i don't want to use the fprint-gui. Cheers, Jonas
signature.asc
Description: OpenPGP digital signature
_______________________________________________ fprint mailing list fprint@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/fprint
