Ewgenij Starostin wrote: > Hi! > > I use a convertible notebook with an AES2501 device and, depending on > whether I use it as a notebook or as a tablet, different fingers are > more or less practical for authentication. Right now, pam_fprint seems > to choose just one fingerprint for authentication. > > Could this be done by changing the authentication logic to get some > device, then get all fingerprints for it rather than just the first and > call fp_identify_finger_img instead of fp_verify_finger? I’m uncertain > about the difference in terms of security between those two functions.
Yes, this would be relatively easy to do. A good solution would be to have this configurable through a parameter specified in the pam config file. Feel free to submit a patch or file a feature request bug. Patches preferable, as I don't know when I'll get to implementing this otherwise. pam_fprint is just a proof-of-concept and there's more important work to be done before I return to the realm of implementing decent fingerprint-based user authentication. Thanks, Daniel _______________________________________________ fprint mailing list [email protected] http://lists.reactivated.net/mailman/listinfo/fprint
