Help - Search - Members - Calendar
Full Version: Anyone using fingerprint authentication?
MandrivaUsers.org > News, Discussion and Chat > Everything Linux
ianw1974
I wondered if any of you have a fingerprint scanner on your laptop, and if you've attempted to use it under Linux?

I tried it once under Windows, and it let me scan a few times, obviously to get an average scan so that it would always allow you to sign in no matter what position your finger was on the fingerprint scanner.

Then yesterday, I decided to install pam_fprint so that I could authenticate with Linux. Once enabled in /etc/pam.d/system-auth, it does work and allow you to sign in from console window as well as under gdm as well. The problem is you can only scan the finger once, and after that it's very hit-and-miss to whether you can authenticate with it or not. Luckily I didn't set it to use just fingerprint, so if it failed to scan properly, I could just give my password.

I have since disabled it, since I was scanning all the time, and never getting a clean scan and so could never sign in with it. I always ended up giving the password. Anyone else got any experience with this, or just never thought about trying it?
ianw1974
OK, did a bit of slower scanning and now I think it's working a bit better.

CODE
[ian@esprit ~]$ su
Scan right index finger on AuthenTec AES2501
[root@esprit ~]#


sweet biggrin.gif
aphelion
QUOTE
I wondered if any of you have a fingerprint scanner on your laptop


Are these laptop exclusive, I guess they wouldn't be, but you use laptop, just curious. How much would one of these cost approx?
ianw1974
I have a HP Business Notebook 6710b, and it wasn't overly expensive. I would say about 500 GBP in the UK. I bought it in Poland, and it was about 3000zl or so back in October 2007. I've seen quite a few HP laptops with these and I expect they will come more popular soon.

I seem to have it working fine now, but I've not logged out to try in gdm yet, but it does prompt you for it when I was testing last night. How to on my website:

Howto: Fingerprint Authentication

nice and simple smile.gif
icepick
HP/Compaq nc8430 AuthenTec AES2501 Mandriva 2008 Spring

I was trying, but I kept having problems with the driver:

CODE
Found device claimed by AuthenTec AES2501 driver
aes2501:error [dev_init] could not claim interface 0
fp:error [fp_dev_open] device initialisation failed, driver=aes2501
Could not open device.


A google search made me thing this had something to do with usb
permissoins, but I was unable to resolve them. In other Linux
variants, usbfs is still mounted through fstab that doesn't appear
to be the case with Mandriva.
ianw1974
I don't have usbfs mounted on my system through fstab. I haven't tried Mandriva, but might give it a go from the Mandriva One CD if it's possible.
ffi
I don't get it, I first need to scan and then it asks my password, how to use the scan to authenticate?
my /etc/pam.d/system-auth
$ su
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Password:


CODE
#%PAM-1.0

auth        required      pam_env.so
auth        sufficient    pam_fprint.so
auth        sufficient    pam_unix.so try_first_pass likeauth nullok
auth        required      pam_deny.so

account     sufficient    pam_unix.so
account     required      pam_deny.so

password    required      pam_cracklib.so try_first_pass retry=3 minlen=4  dcredit=0  ucredit=0
password    sufficient    pam_unix.so try_first_pass use_authtok nullok md5 shadow
password    required      pam_deny.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so
ffi
QUOTE (ianw1974 @ Apr 4 2008, 08:17 AM) *
I have since disabled it, since I was scanning all the time, and never getting a clean scan and so could never sign in with it. I always ended up giving the password. Anyone else got any experience with this, or just never thought about trying it?

i have the same results in vista
ianw1974
The problem is your scan was done too fast, which is why it asked for your password - it didn't recognise your fingerprint. I have it working fine once I did the scan slower originally when I created the fingerprint image.
ffi
QUOTE (ianw1974 @ Apr 30 2008, 07:04 AM) *
The problem is your scan was done too fast, which is why it asked for your password - it didn't recognise your fingerprint. I have it working fine once I did the scan slower originally when I created the fingerprint image.


No, too many failed scans look like this:

$ su
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Scan left index finger on AuthenTec AES1610
Scan didn't quite work. Please try again.
Too many failed scans, giving up.
Password:


and in kdm I first have to my password and then have to succesfully scan my finger to login
ianw1974
Hmmm strange, with gdm it only asks for fingerprint and only password if it fails reading it.
scarecrow
QUOTE (icepick @ Apr 11 2008, 06:44 PM) *
A google search made me thing this had something to do with usb
permissoins, but I was unable to resolve them. In other Linux
variants, usbfs is still mounted through fstab that doesn't appear
to be the case with Mandriva.


Try adding to your /etc/fstab something like
CODE
none            /proc/bus/usb    usbfs     devgid=XXX,devmode=664     0    0

The devgid number could be the one of your main user's primary group, while the devmode one can be changed to 666 (accepting a slight security risk), if 664 does not work as it should.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2008 Invision Power Services, Inc.