From c1ec85006e37b3408102278d06c3491e9b789339 Mon Sep 17 00:00:00 2001 From: Bastien Nocera Date: Tue, 25 Nov 2008 19:42:09 +0000 Subject: [PATCH] Add README for the PAM module With some more info about the options. --- pam/README | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 pam/README diff --git a/pam/README b/pam/README new file mode 100644 index 0000000..9174deb --- /dev/null +++ b/pam/README @@ -0,0 +1,26 @@ +PAM module for fingerprint authentication +----------------------------------------- + +Using: +* Modify the appropriate PAM configuration file +(/etc/pam.d/system-auth-ac on Fedora systems), and add the line: +auth sufficient pam_fprintd.so +before the line: +auth sufficient pam_unix.so ... +* You can now enroll fingerprints using fprintd-enroll. The first available + fingerprint available will be used to log you in. + +Options: +* You can add the "debug" option on the pam configuration file line above, + this will log more information from PAM to the file specified in your + syslog configuration (/var/log/secure by default on Fedora) + +Known issues: +* pam_fprintd does not support identifying the user itself as + that would mean having the fingerprint reader on for all the time + the user selection is displayed, and could damage the hardware. + It could be fixed by having gdm/login only start the PAM conversation + when there is activity +* pam_fprintd doesn't support entering either the password or a fingerprint, + as pam_thinkfinger does, because it's a gross hack, and could be fixed + by having the login managers run 2 separate PAM stacks