On Fri, Apr 24, 2009 at 3:38 AM, LEVAI Daniel <[email protected]> wrote:
> On Friday 24 April 2009 09.28.34 you wrote:
>> omg we have finger print reader support??? !
>>
>> I installed the port and I'm playing with it. Can you post your full
>> config? The login_fingerprint docs are short on the troubleshooting. I
>> can enroll my fingers and I've got su asking me for finger swipes but
>> whenever I do it says "invalid swipe" or "login incorrect".
> You need to enroll_fingerprint(8) as the target (root) user too, so root
will
> have a ~/.fprint directory too.
When I say "su" I actually meant I'm running "su $USER".
>> I see the same result as you with sudo. Annoying. Sudo must not be
>> feeding it correctly right, but perhaps login_fingerprint is expecting
>> wrongly.
>>
>> It would be a neat gimmick if we could get this working!
> I just followed /usr/local/share/doc/login_fingerprint/README:
> $ enroll_fingerprint -f 7
> It has populated a ~/.fprint/ dir with the scanned fingerprint, and after
the
> login.conf modify I could login on the console and do `su`. Only sudo seems
> to need the '-apasswd' option to force it to use the passwd auth type
instead
> of the -fingerprint type. But grepping thru sudo's source I couldn't find
> this error message anywhere :\
>
> My modifications in login.conf is only the following:
> --- /var/backups/etc_login.conf.backup Thu Apr 16 16:06:00 2009
> +++ /etc/login.conf Thu Apr 23 17:15:23 2009
> @@ -23,7 +23,8 @@
> #
>
> # Default allowed authentication styles
> -auth-defaults:auth=passwd,skey:
> +auth-defaults:auth=-fingerprint,passwd,skey:\
> + :x-fingerprint=7:
>
> # Default allowed authentication styles for authentication type ftp
> auth-ftp-defaults:auth-ftp=passwd:
>
I followed the README too but it told me to add this:
#
# The fingerprint login class allows the fingerprint and passwd
# authentication methods and checks your 7th (right index) finger.
#
fingerprint:
:auth=-fingerprint,passwd:\
:x-fingerprint=7:\
:tc=default:
and I had to do "sudo usermod -L fingerprint $USER" to get "su $USER"
to start asking me to swipe. Do we maybe have different versions (I
should probably shyly mention here that I'm on -CURRENT right now)?
Why are we writing "-fingerprint" instead of "fingerprint"?
login.conf(8) is hazy on what this means. It doesn't seem to matter
espcially which is chosen.
I suspect my problem is a driver issue. I have a 1600 chip (as linux
tells me... dunno why OpenBSD) but the driver is written for 1610
chips. Until I can at least use su with my finger I'm not sure I can
help you.
-Nick
