[Fingerforce-devel] Bug#464963: Bug#464963: thinkfinger-tools: tf-tool is built without PAM support

[Andrew J Perrin]

Don't worry about the delay! Thanks for the work you do.

The reason for my post was that the --add-user and --verify-user options 
do not work with the version of tf-tool in the package. The man page says 
that these are available "only when ThinkFinger has been compiled with PAM 
support."

Best regards,
Andy

---From the manpage:

--add-user "login"
     Acquire a fingerprint for the user identified by login. If this user 
or the bir folder /etc/pam_thinkfinger do not exist, tf-tool exits with an 
error. If the acquiring process is successful, the fingerprint is stored 
in the bir folder as /etc/pam_thinkfinger/login.bir. This option is 
available only when ThinkFinger has been compiled with PAM support.

--verify-user "login"
     Verify a fingerprint for the user identified by login. If this user or 
the bir folder /etc/pam_thinkfinger do not exist, tf-tool exits with an 
error. This option is available only when ThinkFinger has been compiled 
with PAM support.

In the configuration script for thinkfinger there is:

   --enable-pam            build PAM module




----------------------------------------------------------------------
Andrew J Perrin - andrew_perrin at unc.edu - http://perrin.socsci.unc.edu
Associate Professor of Sociology; Book Review Editor, _Social Forces_
University of North Carolina - CB#3210, Chapel Hill, NC 27599-3210 USA


On Tue, 4 Mar 2008, Luca Capello wrote:

> Hi Andrew!
>
> I'm really sorry for the delay.
>
> On Sun, 10 Feb 2008 04:21:10 +0100, Andrew Perrin wrote:
>> tf-tool is built without PAM support, so it cannot be used to allow
>> login security using PAM. Since this is a central reason for using the
>> fingerprint reader, it ought to be available.
>
> Can you elaborate more on what you mean by "tf-tool is built without PAM
> support"?  tf-tool has nothing to do with PAM: it's an utility to
> acquire/verify fingerprints.
>
> I guess you ignore the existence of libpam-thinkfinger, the PAM module
> allowing fingerprint login through ThinkFinger.
>
> OTOH, if you're referring to the fact that tf-tool cannot be launched by
> a non-root user, I already fixed the permission problems for the USB
> device (SVN r83, bug #469043 [2]) and for the uinput device (SVN r84,
> bug #469048 [3]).  These fixes, together with the move of tf-tool from
> /usr/sbin to /usr/bin [1], will be present in the next Debian version.
>
> If you don't reply to this mail in one week, I'll close the bug.
>
> Thx, bye,
> Gismo / Luca
>
> Footnotes:
> [1] http://news.gmane.org/find-root.php?message_id=%3c87wsojwett.fsf%40gismo.pca.it%3e
>