[ltp] T43 finger print reader problems

Wolfgang Karall linux-thinkpad@linux-thinkpad.org
Tue, 06 Dec 2005 21:27:10 +0100


On Tue, 2005-12-06 at 19:53 +0000, Alastair McKinley wrote:
> This is my /etc/pam.d/system-auth file, I havent edited common-auth:

I wouldn't put it in system-auth, since it seems to be the "fallback to
deny access" file in FC4. (not using Fedora I can't really tell, just
guessing from the supplied file)

Personally I wouldn't put it in common-auth either, instead put it just
in those configurations that you want to use with it, e.g. login, gdm or
similar, maybe su. OTOH it doesn't make sense for e.g. ssh, so putting
it into common-auth is not a good idea IMO.

> auth        required      /lib/security/$ISA/pam_env.so
> auth        sufficient    /lib/security/$ISA/pam_unix.so likeauth nullok
> auth        required      /lib/security/$ISA/pam_deny.so

> auth       sufficient   pam_bioapi.so
> {5550454b-2054-464d-2f45-535320425350} /etc/bioapi/pam/

> Can anyone point me in the right direction?  

PAM modules get called in the order supplied in the configuration, see
http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam-4.html

So you need to put the bioapi module more towards the start of the
auth-modules series.

Regards
WK
-- 
http://linux.spiney.org/debian_gnu_linux_on_an_ibm_thinkpad_t43p