[Fingerforce-devel] Bug#586264: libpam-fprint does not work with sudo

[Rasmus Bøg Hansen]

Package: libpam-fprint
Version: 20080330+git-5
Severity: normal

*** Please type your report below this line ***

libpam-fprint does no longer work with sudo. It did in the past (a month 
or two ago) but with an sudo update, it stopped working. This was the 
old experimental version.

In the meantime I have got the new version installed (in testing) and 
the same problem happens. I no longer have fprint configured in pam 
manually but automatically with "dpkg-reconfigure libpam-fprint" - this 
gives the same behaviour. If I disable unix authentication, sudo just 
skips to say that it cannot find a suitable authentication mechanism.

fprint works perfectly well with su, gdm (versions 2 and 3) and console 
login, eg.:

moffe at hactar:~$ su - moffe
Scan right index finger on UPEK TouchStrip
moffe at hactar:~$ exit
logout
moffe at hactar:~$ sudo bash
[sudo] password for moffe:
root at hactar:~#

Notice how sudo goes directly to password authentication while su does 
only if fingerprint fails.

This is, of course, just annoying (I know my password :-), but sudo is 
probably the authentication I use the most.

I have no idea what the actual problem is, but I am almost sure this 
sudo update is the problem:

sudo (1.7.2p6-1) unstable; urgency=low

   * new upstream version fixing CVE-2010-1163, closes: #578275, #570737

  -- Bdale Garbee <bdale at gag.com>  Mon, 19 Apr 2010 10:45:47 -0600

Note that I only *assume* this is an fprint problem - feel free to 
reassign to sudo if you think it is the problem...

Regards
/Rasmus Bøg Hansen

-- System Information:
Debian Release: squeeze/sid
   APT prefers testing
   APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.34 (SMP w/2 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8) (ignored: 
LC_ALL set to da_DK.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libpam-fprint depends on:
ii  libc6                      2.11.1-3      Embedded GNU C Library: 
Shared lib
ii  libfprint0                 20081125git-4 async fingerprint library 
of fprin
ii  libpam-runtime             1.1.1-3       Runtime support for the PAM 
librar
ii  libpam0g                   1.1.1-3       Pluggable Authentication 
Modules l

libpam-fprint recommends no packages.

libpam-fprint suggests no packages.

-- no debconf information

-- 
Rasmus Bøg Hansen         || moffe at zz9.dk
C.F. Møllers Allé 46, 3tv || http://www.zz9.dk
2300 København S          ||