Fingerprint sudo and su authentication on Thinkpad E430

ericvm · 2012-10-15 14:50:28

I have followed the tutorial on the Arch Wiki (https://wiki.archlinux.org/index.php/Fingerprint-gui) to enable fingerprint authentication using the fingerprint-gui, changing the files /etc/pam.d/sudo and /etc/pam.d/su as described.

su is working fine with fingerprint, however when I try to use sudo, first it prompts for a password, like this:
"Password:"
Then if you type anything, it asks for the real password:
"[sudo] password for eric:"

I can't understand why su works fine and sudo does not. My files look like this:

/etc/pam.d/su

#%PAM-1.0
auth sufficient pam_rootok.so
auth sufficient pam_fingerprint-gui.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required pam_wheel.so use_uid
auth required pam_unix.so
account required pam_unix.so
session required pam_unix.so

/etc/pam.d/sudo

#%PAM-1.0
auth sufficient pam_fingerprint-gui.so
auth required pam_unix.so
auth required pam_nologin.so

Any idea of what could be going on?

WonderWoofy · 2012-10-15 15:00:23

I am not sure about how it acts with the new versions of sudo. But I wrote that page. The information I pulled from is here:
http://www.n-view.net/Appliance/fingerp … anual.html

I did get it working on my machine, But I noticed that when I would use sudo, it would ask me for a password while simutaneously asking for a swipe. If I chose to use my keyboard, it would kill the fingerprint dialog box, and then ask for my sudo password again. Is this what you are saying that it is doing?

I didn't find a workaround for that because, honestly, I found the fingerprint reader really annoying to use. I guess just having to take my hands off the keyboard to do that just seemed to me like a hassle. I think one spot where it would be pretty good though is for your login manager. Unfortunately, I don't use one of those either....

I think the reason why I put the work into figuring out how to get it to work is because I wanted to see if I could get all the stuff working on my machine. I guess you have probably found my E430 page as well, and I did indeed finally get everything working.

BTW, what kind of wifi card did your machine come with? Does it use the rtl8192ce module? If so, good luck! (I can help you with that if you need)

ericvm · 2012-10-15 16:01:08

Thanks for the feedback.

When I try sudo, it just prompts for a password, it doesn't ask for a swipe. It doesn't matter what you type in there, after you press enter it will ask for the [sudo] password.

When I use su, it shows like this:
"Password:
Fingerprint Login 1.04
Authenticating root
Swipe your finger or type your password:"

When I use sudo, it just shows this:
"Password:"

But now that I checked, when I use su, it happens as you said. If I decide to type the password, it asks for the password again.

Well, I also just want to see this working because I want everything working. But generally I think it is a good idea, specially if you use cryptic and long passwords. I also would very much like to see this working for website passwords, but that is another matter.

My wireless card is the following:
Intel Corporation Centrino Wireless-N 2230 (rev c4)

It worked for me out of the box. So far I haven't noticed any problems. The article about E430 on Arch Wiki mentioned a delay before any attempt to network activity. I haven't really noticed anything that annoyed me, both with ethernet and wireless, so I didn't change anything. Should I?

WonderWoofy · 2012-10-15 16:25:36

I wrote the E430 article too. The delay is regarding the ThinkPad b/g/n card, which you don't have. I think I also mentioned that you should get your machine with the intel card given the choice. So way to go.

I think you are just going to have to play around with the fingerprint-gui thing. I really didn't use it long enough to really learn the ins and outs of the system. Honestly, I got it working, and after about a day and a half, got fed up with the way it prompted me. So I didn't even use it long enough to break it, which I seem to usually accomplish with enough tinkering.

Maybe after work, I will reinstall and see if I can help you out though. You are going to have to wait a few hours though.

So I will be back in a bit. Good luck!

WonderWoofy · 2012-10-16 01:26:50

You know, I reinstalled it, I reenabled my fingerprint reader in the bios, went to go check-a-check it out, and..... nothing. It indicates there is UPEK there, but does not recognize that that is the device it is looking for. I rebooted again, Still no go.

I am sorry, but since I don't use this, I really see no benefit in spending a bunch of time debugging this situation.

One thing I can tell you is that I am pretty sure that the order in which you include the auth's in the pam.d stuff matters. So maybe fiddling with that might help the su thing.

kkuma · 2015-08-02 13:21:14

My occasion is contrary and su can't move. It's made alias su='sudo su' in .bashrc which is the manner.

WorMzy · 2015-08-02 16:14:00

kkuma, please don't bump old topics, particularly when you have nothing to add.

https://wiki.archlinux.org/index.php/Fo … bumping.22

If you're having trouble with your fingerprint reader, please open a new topic, and link back to this one if you think it's still relevant.

Closing.

Arch Linux

#1 2012-10-15 14:50:28

Fingerprint sudo and su authentication on Thinkpad E430

#2 2012-10-15 15:00:23

Re: Fingerprint sudo and su authentication on Thinkpad E430

#3 2012-10-15 16:01:08

Re: Fingerprint sudo and su authentication on Thinkpad E430

#4 2012-10-15 16:25:36

Re: Fingerprint sudo and su authentication on Thinkpad E430

#5 2012-10-16 01:26:50

Re: Fingerprint sudo and su authentication on Thinkpad E430

#6 2015-08-02 13:21:14

Re: Fingerprint sudo and su authentication on Thinkpad E430

#7 2015-08-02 16:14:00

Re: Fingerprint sudo and su authentication on Thinkpad E430

Board footer