Difference between revisions of "ThinkFinger"

From ArchWiki
Jump to: navigation, search
m ("wikified" a little, added su-hint)
Line 8: Line 8:
 
=== TF-Tool ===
 
=== TF-Tool ===
  
Use "tf-tool" to test ThinkFinger. You'll have to run this as root because a direct access to the usb devices is needed.
+
Use <i>tf-tool</i> to test ThinkFinger. You'll have to run this as root because a direct access to the usb devices is needed.
Run "tf-tool --acquire" to generate a test.bir and "tf-tool --verify" to see if it identifies you correctly.
+
Run <i>tf-tool --acquire</i> to generate a test.bir and <i>tf-tool --verify</i> to see if it identifies you correctly.
"tf-tool --add-user <username>" acquires and stores your fingerprint in /etc/pam_thinkfinger/username.bir, which is needed for an authentification with pam.
+
<i>tf-tool --add-user <username></i> acquires and stores your fingerprint in <i>/etc/pam_thinkfinger/username.bir</i>, which is needed for an authentification with pam.
  
 
== Pam ==
 
== Pam ==
Line 16: Line 16:
  
 
=== /etc/pam.d/other ===
 
=== /etc/pam.d/other ===
Change the file /etc/pam.d/other to look like this if you want to use your fingerprint to authenticate yourself on logon:
+
Change the file <i>/etc/pam.d/other</i> to look like this if you want to use your fingerprint to authenticate yourself on logon:
 
  #%PAM-1.0
 
  #%PAM-1.0
 
  auth sufficient pam_thinkfinger.so
 
  auth sufficient pam_thinkfinger.so
Line 26: Line 26:
  
 
=== /etc/pam.d/su ===
 
=== /etc/pam.d/su ===
Change this file to confirm the "su" command with a finger-swipe!
+
Change this file to confirm the <i>su</i> command with a finger-swipe!
 
  #%PAM-1.0
 
  #%PAM-1.0
 
  auth sufficient pam_thinkfinger.so
 
  auth sufficient pam_thinkfinger.so
Line 32: Line 32:
 
  account required pam_unix.so
 
  account required pam_unix.so
 
  session required pam_unix.so
 
  session required pam_unix.so
 
+
<b>Don't forget to do a <i>tf-tool --add-user root</i>!</b>
--[[User:Sigi|Sigi]] 12:17, 30 January 2007 (EST)
+

Revision as of 23:20, 4 February 2007

ThinkFinger is a driver for the SGS Thomson Microelectronics fingerprint reader found in most IBM/Lenovo ThinkPads.

Installation

Get if from here.

Configuration

TF-Tool

Use tf-tool to test ThinkFinger. You'll have to run this as root because a direct access to the usb devices is needed. Run tf-tool --acquire to generate a test.bir and tf-tool --verify to see if it identifies you correctly. tf-tool --add-user <username> acquires and stores your fingerprint in /etc/pam_thinkfinger/username.bir, which is needed for an authentification with pam.

Pam

PAM is the Pluggable Authentication Module, invented by Sun.

/etc/pam.d/other

Change the file /etc/pam.d/other to look like this if you want to use your fingerprint to authenticate yourself on logon:

#%PAM-1.0
auth		sufficient	pam_thinkfinger.so
auth		required	pam_unix.so use_first_pass nullok_secure
account		required	pam_unix.so
password	required	pam_unix.so
session		required	pam_unix.so


/etc/pam.d/su

Change this file to confirm the su command with a finger-swipe!

#%PAM-1.0
auth		sufficient 	pam_thinkfinger.so
auth		required	pam_unix.so use_first_pass nullok_secure
account		required	pam_unix.so
session		required	pam_unix.so

Don't forget to do a tf-tool --add-user root!