ThinkWiki - User contributions [en]

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T18:31:53Z

Kwbolte: /* Configuring PAM to use ThinkFinger */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you are using Gentoo, you can just emerge sys-auth/thinkfinger.

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|openSUSE 10.2 includes the package "libthinkfinger" (version 0.1-7) - you will find newer packages here: [http://beta1.suse.com/private/thoenig/10.2/thinkfinger/]}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

{{NOTE|for openSUSE use this configure-command:}}
<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --prefix=/usr --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

On openSUSE 10.2 it looks like this now:
auth required pam_env.so
auth sufficient pam_thinkfinger.so
auth required pam_unix2.so

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

Integration in KDE and kdm seems not to be easily possible now. There is a filed bug at kde.org where you can vote for this: [https://bugs.kde.org/show_bug.cgi?id=116682]

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T17:37:30Z

Kwbolte: /* Installing from source */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|openSUSE 10.2 includes the package "libthinkfinger" (version 0.1-7) - you will find newer packages here: [http://beta1.suse.com/private/thoenig/10.2/thinkfinger/]}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

{{NOTE|for openSUSE use this configure-command:}}
<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --prefix=/usr --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

On openSUSE 10.2 it looks like this now:
auth required pam_env.so
auth sufficient pam_thinkfinger.so
auth required pam_unix2.so

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T14:11:33Z

Kwbolte: /* Configuring PAM to use ThinkFinger */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

{{NOTE|for openSUSE use this configure-command:}}
<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --prefix=/usr --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

On openSUSE 10.2 it looks like this now:
auth required pam_env.so
auth sufficient pam_thinkfinger.so
auth required pam_unix2.so

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T12:52:33Z

Kwbolte: /* Configuring PAM to use ThinkFinger */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

{{NOTE|for openSUSE use this configure-command:}}
<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --prefix=/usr --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

On openSUSE 10.2 it looks like this now:
auth sufficient pam_thinkfinger.so
auth required pam_env.so
auth required pam_unix2.so

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T12:37:07Z

Kwbolte: /* Installing from source */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

{{NOTE|for openSUSE use this configure-command:}}
<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --prefix=/usr --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-27T11:35:45Z

Kwbolte: /* Installing from source */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.3.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have the gcc compiler, libtool, pkgconfig, libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.3}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian and openSUSE, it may vary for your distro!}}

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-19T12:44:31Z

Kwbolte: /* Testing the driver */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.2.2.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.2.2}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian, it may vary for your distro!}}

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it (as root) with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

How to enable the integrated fingerprint reader with ThinkFinger

2007-05-19T12:42:55Z

Kwbolte: /* Installing from source */

[[How to enable the fingerprint reader]] has a good explanation for using the fingerprint reader with the closed-source binary driver. But there is also an opensource project called [http://thinkfinger.sourceforge.net ThinkFinger] which does the same, but open.

== Installing from source ==
Speaking for Debian, there are no packages of ThinkFinger in the repositories yet (cf. [http://bugs.debian.org/409563 bug #409563]), so I describe the installation from source. If you're on Gentoo, you can find an ebuild at [https://bugs.gentoo.org/show_bug.cgi?id=162297 bug 162297].

{{NOTE|packages for Debian (testing) are available here: [http://www.rubixlinux.org/debian/thinkfinger/]}}
{{NOTE|packages for Fedora Core 6 are available in "extras" repository (#yum install thinkfinger)}}
{{NOTE|packages for openSUSE 10.2 are included as "libthinkfinger" (version 0.1-7)}}

Download thinkfinger-0.2.2.tar.gz from the [http://thinkfinger.sourceforge.net/ homepage] and unpack it somewhere, make sure you have libusb-dev and libpam0g-dev installed, then:

{{cmduser|cd thinkfinger-0.2.2}}

<code style="white-space:nowrap;color:#495988;background-color:white;"><nowiki>$</nowiki> ./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger</code>

{{cmduser|make}}

{{cmdroot|make install}}

{{NOTE|/lib/security is the dir, where pam assumes its modules on Debian, it may vary for your distro!}}

If everything went ok assert that you find pam_thinkfinger.so in /lib/security typing:

{{cmduser|ls /lib/security}}

== Testing the driver ==
Now the driver is installed and should be working. You can try it with

{{cmdroot|tf-tool --acquire}}

and

{{cmdroot|tf-tool --verify}}

This will ask you to swipe your finger three times, save the fingerprint to /tmp/test.bir and then verify your fingerprint with the bir-file.

== Configuring PAM to use ThinkFinger ==
Now you can configure pam to use ThinkFinger:

Open /etc/pam.d/common-auth:
{{NOTE|In FC6 this file is "/etc/pam.d/system-auth"}}

{{cmdroot|nano -w /etc/pam.d/common-auth}}

Add this line before any pam_unix or pam_unix2 directives:
auth sufficient pam_thinkfinger.so

If your PAM uses the pam_unix and not the pam_unix2 module, you need to pass a specific argument in
the /etc/pam.d/common-auth directive to make it consider the password entered at the pam_thinkfinger prompt.
auth required pam_unix.so try_first_pass

For instance my /etc/pam.d/common-auth looks like this:
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass

Now we are ready to add users to thinkfinger. As make install did not create /etc/pam_thinkfinger, we need to create it now:

{{cmdroot|mkdir /etc/pam_thinkfinger}}

And now we can add a fingerprint for a user with:

{{cmdroot|tf-tool --add-user $USERNAME}}

Now the user should be able to login with his finger, instead of the password.

{{NOTE|You should see the "Password or swipe finger:" prompt when trying to sudo or su. If you don't, you probably do not have the "User level driver support" compiled into your kernel or the "uinput" module loaded!}}

{{NOTE|gksu/gksudo seems to break. However, it just stays invisible. When starting a su privileged application such as synaptics you will not get prompted for the password. Nevertheless you can swipe your finger and it should authenticate you. Starting synaptics twice makes gksudo visible.}}

This Howto was copied from [[Installing Ubuntu 6.06 on a ThinkPad T43#Fingerprint_Reader]] and then slightly modified by me.

Talk:ThinkPad Port Replicator II

2005-12-26T16:35:29Z

Kwbolte:

I have this Port replicator and was wondering if the '''DVI''' port is incompatable with my system.
I have Thinkpad R40 2722-BBG.
Thanks,
----
There is almost no documentation on which systems support DVI, and which do not.

If I where to guess, I would say no, but the best way to find out is to simply attach a DVI display and see if it works.

If you find out, either way, let us know.

--[[User:Tonko|Tonko]] 02:44, 2 Nov 2005 (CET)
----
Does anybody know anything about the compatibility to '''Linux''' in general? Does anything work without problems?

Is it really compatible with the '''R52''' (1860), it's not listed on the IBM/Lenovo website [[http://www-131.ibm.com/webapp/wcs/stores/servlet/ProductDisplay?catalogId=-840&storeId=10000001&langId=-1&dualCurrId=73&categoryId=2581897&productId=8581830]].

Thank you

--[[User:Kwbolte|Kwbolte]] 17:28, 26 Dec 2005 (CET)

Talk:ThinkPad Port Replicator II

2005-12-26T16:28:08Z

Kwbolte:

I have this Port replicator and was wondering if the '''DVI''' port is incompatable with my system.
I have Thinkpad R40 2722-BBG.
Thanks,
----
There is almost no documentation on which systems support DVI, and which do not.

If I where to guess, I would say no, but the best way to find out is to simply attach a DVI display and see if it works.

If you find out, either way, let us know.

--[[User:Tonko|Tonko]] 02:44, 2 Nov 2005 (CET)
----
Does anybody know anything about the compatibility to '''Linux''' in general? Does anything work without problems?

Is it really compatible with the '''R52''' (1860), it's not listed on the IBM/Lenovo website.

Thank you

--[[User:Kwbolte|Kwbolte]] 17:28, 26 Dec 2005 (CET)