Arch Linux

gonX

Member

From: Denmark

Registered: 2009-08-16

Posts: 112

SLiM and fingerprint-gui PAM login

I've spent some time setting Arch up on my new laptop, and it has one of them fandangled fingerprint readers, so I thought why not use it to log in with?

I currently use SLiM to log me in - and I've gotten as far as to recompile SLiM to use PAM, and it even asks me for a fingerprint, but when I swipe, it confirms my identity, but then nothing happens (and I have to type in my password anyway).

/etc/pam.d/slim:

#%PAM-1.0

auth        include     system-local-login
-auth       optional    pam_gnome_keyring.so
account     include     system-local-login
session     include     system-local-login
-session    optional    pam_gnome_keyring.so auto_start

/etc/pam.d/system-local-login:

#%PAM-1.0

auth		sufficient	pam_fingerprint-gui.so 
auth      include   system-login
account   include   system-login
password  include   system-login
session   include   system-login

(/etc/pam.d/system-login is untouched)

At the moment, I have su and console login working fine with it, so it seems to be an issue with SLiM.

Speaking of which, here's some other relevant config files:

/etc/pam.d/login:

#%PAM-1.0

auth	sufficient	pam_fingerprint-gui.so
auth       required     pam_securetty.so
auth       requisite    pam_nologin.so
auth       include      system-local-login
account    include      system-local-login
session    include      system-local-login

/etc/pam.d/su:

#%PAM-1.0
auth		sufficient	pam_rootok.so
auth		sufficient	pam_fingerprint-gui.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth		sufficient	pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth		required	pam_wheel.so use_uid
auth		required	pam_unix.so
account		required	pam_unix.so
session		required	pam_unix.so

Ultimately I would like to stick with SLiM, but from what I can figure out, development has stalled, and it doesn't support systemd-logind very well.

Thanks for the help

Last edited by gonX (2014-10-02 13:09:09)

---

since 2009

Kilzool

Member

From: Ireland

Registered: 2010-08-04

Posts: 232

Re: SLiM and fingerprint-gui PAM login

Have you tried editing the /etc/slim.conf  file to not require a password (auto-login)?
Perhaps that will prompt the fingerprint, but avoid the password.  Not sure though.

gonX

Member

From: Denmark

Registered: 2009-08-16

Posts: 112

Re: SLiM and fingerprint-gui PAM login

Have you tried editing the /etc/slim.conf  file to not require a password (auto-login)?
Perhaps that will prompt the fingerprint, but avoid the password.  Not sure though.

The fingerprint is already prompted.
Setting auto-login to "yes" instead of the default "no" changes nothing.
It seems to only do something when a user is specified in the `default_user` setting (as the conf file mentions).

I did however try setting my default_user and that seems to have "fixed" it.
It obviously asks for specifically my fingerprint now, and it works, but it's not ideal for when I start having multiple users on this box.

But consider the issue semi-solved.

---

since 2009