Thursday, May 16, 2013

Using fingerprint for login/su/sudo with Fprint on Archlinux

My Toshiba Portege M600 have a fingerprint feature on it. To enable fingerprint, you can use pam-Fprint software. pam-Fprint  is a simple PAM module which uses libfprint's fingerprint processing and verification functionality for authentication.

Before installing fprint, make sure your hardware is supported, you can see the list on here.

Check lsusb first, on my machines

Using fingerprint for login/su/sudo with Fprint on Archlinux

It's fully supported.

Install Fprint:
$sudo pacman -S fprintd pam libusb imagemagick
Configuration:
$sudo su
#groupadd plugdev
#gpasswd -a yourusername plugdev
#chgrp -R plugdev /dev/bus/usb/

Now set your finger:
For User:
$fprintd-enroll
For Su:
$su
#fprintd-enroll

Roll your finger like this:


Do this 3 times, until all passed:

Using fingerprint for login/su/sudo with Fprint on Archlinux

Then now modify /etc/pam.d/---

For Login gdm/kdm:
Modify: login
$sudo nano /etc/pam.d/login
add this
auth required pam_env.so
auth sufficient pam_fprintd.so
auth sufficient pam_unix.so try_first_pass likeauth nullok
auth required pam_deny.so

For another line comment with #

Like this picture:

Using fingerprint for login/su/sudo with Fprint on Archlinux

And for /su, /sudo same as above.
$sudo nano /etc/pam.d/su
$sudo nano /etc/pam.d/sudo

OK. Now try fingerprint. :D

For sudo & su:

Using fingerprint for login/su/sudo with Fprint on Archlinux

Enjoy. ^_^
Share on Facebook
Share on Twitter
Share on Google+