Difference between revisions of "How to enable integrated fingerprint reader with fprint"

From ThinkWiki
Jump to: navigation, search
(Ubuntu 11.04)
(Ubuntu 11.04)
Line 1: Line 1:
 
== Ubuntu 11.04 ==
 
== Ubuntu 11.04 ==
The [[integrated fingerprint reader]] on the ThinkPad {{X220}} (at least) is supported in {{Ubuntu 11.04}} (natty).
+
The UPEK [[integrated fingerprint reader]] on the ThinkPad {{X220}} is supported in {{Ubuntu 11.04}} (natty).
  
 
Install the necessary packages if they aren't already present.
 
Install the necessary packages if they aren't already present.
Line 7: Line 7:
 
</pre>
 
</pre>
  
Confirm that the needed lines in <tt>common-auth</tt> are already present.
+
Observe that the needed lines in <tt>common-auth</tt> are already present.
 
<pre>
 
<pre>
 
$ grep fprint /etc/pam.d/common-auth
 
$ grep fprint /etc/pam.d/common-auth
Line 13: Line 13:
 
</pre>
 
</pre>
  
Log in to the desktop.  Open a terminal.  In the terminal run <tt>fprintd-enroll</tt> and swipe your right index finger five times.
+
Log in to the desktop.  Open a terminal.  In the terminal run <tt>fprintd-enroll</tt> and swipe your right index finger five times.  Now you should be able to authenticate by swiping your right index finger.
  
Now you should be able to authenticate by swiping your right index finger.
+
If you have an encrypted home directory then logging in from GDM by fingerprint is broken: the home directory cannot be decrypted.  The solution is to log in with a password.
  
If you have an encrypted home directory or a password-protected default keyring then logging in from GDM by fingerprint is broken: the home directory cannot be decrypted.  To deal with this, edit <tt>/etc/pam.d/gdm</tt> so that it includes <tt>/etc/pam.d/common-auth-nofinger</tt> rather than <tt>/etc/pam.d/common-auth</tt>; copy <tt>/etc/pam.d/common-auth</tt> to <tt>/etc/pam.d/common-auth-nofinger</tt> and remove the line <tt>auth [success=3 default=ignore] pam_fprintd.so</tt> from the latter.
+
Problem is that GDM follows the default authentication procedure which starts with an attempt to read a fingerprint.  Only once this fails or times out is a password requested.  That is not convenient.  To eliminate fingerprint authentication from GDM login, edit <tt>/etc/pam.d/gdm</tt> so that it includes <tt>/etc/pam.d/common-auth-nofinger</tt> rather than <tt>/etc/pam.d/common-auth</tt>; copy <tt>/etc/pam.d/common-auth</tt> to <tt>/etc/pam.d/common-auth-nofinger</tt> and remove the line <tt>auth [success=3 default=ignore] pam_fprintd.so</tt> from the latter.

Revision as of 13:28, 3 August 2011

Ubuntu 11.04

The UPEK integrated fingerprint reader on the ThinkPad X220 is supported in Template:Ubuntu 11.04 (natty).

Install the necessary packages if they aren't already present.

aptitude install libpam-fprintd

Observe that the needed lines in common-auth are already present.

$ grep fprint /etc/pam.d/common-auth
auth	[success=2 default=ignore]	pam_fprintd.so 

Log in to the desktop. Open a terminal. In the terminal run fprintd-enroll and swipe your right index finger five times. Now you should be able to authenticate by swiping your right index finger.

If you have an encrypted home directory then logging in from GDM by fingerprint is broken: the home directory cannot be decrypted. The solution is to log in with a password.

Problem is that GDM follows the default authentication procedure which starts with an attempt to read a fingerprint. Only once this fails or times out is a password requested. That is not convenient. To eliminate fingerprint authentication from GDM login, edit /etc/pam.d/gdm so that it includes /etc/pam.d/common-auth-nofinger rather than /etc/pam.d/common-auth; copy /etc/pam.d/common-auth to /etc/pam.d/common-auth-nofinger and remove the line auth [success=3 default=ignore] pam_fprintd.so from the latter.