[Fingerforce-devel] Bug#586264: libpam-fprint does not work with sudo
Rasmus Bøg Hansen
moffe at zz9.dk
Thu Jun 17 21:00:34 UTC 2010
*** Please type your report below this line ***
libpam-fprint does no longer work with sudo. It did in the past (a month
or two ago) but with an sudo update, it stopped working. This was the
old experimental version.
In the meantime I have got the new version installed (in testing) and
the same problem happens. I no longer have fprint configured in pam
manually but automatically with "dpkg-reconfigure libpam-fprint" - this
gives the same behaviour. If I disable unix authentication, sudo just
skips to say that it cannot find a suitable authentication mechanism.
fprint works perfectly well with su, gdm (versions 2 and 3) and console
moffe at hactar:~$ su - moffe
Scan right index finger on UPEK TouchStrip
moffe at hactar:~$ exit
moffe at hactar:~$ sudo bash
[sudo] password for moffe:
root at hactar:~#
Notice how sudo goes directly to password authentication while su does
only if fingerprint fails.
This is, of course, just annoying (I know my password :-), but sudo is
probably the authentication I use the most.
I have no idea what the actual problem is, but I am almost sure this
sudo update is the problem:
sudo (1.7.2p6-1) unstable; urgency=low
* new upstream version fixing CVE-2010-1163, closes: #578275, #570737
-- Bdale Garbee <bdale at gag.com> Mon, 19 Apr 2010 10:45:47 -0600
Note that I only *assume* this is an fprint problem - feel free to
reassign to sudo if you think it is the problem...
/Rasmus Bøg Hansen
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.34 (SMP w/2 CPU cores)
Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8) (ignored:
LC_ALL set to da_DK.UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages libpam-fprint depends on:
ii libc6 2.11.1-3 Embedded GNU C Library:
ii libfprint0 20081125git-4 async fingerprint library
ii libpam-runtime 1.1.1-3 Runtime support for the PAM
ii libpam0g 1.1.1-3 Pluggable Authentication
libpam-fprint recommends no packages.
libpam-fprint suggests no packages.
-- no debconf information
Rasmus Bøg Hansen || moffe at zz9.dk
C.F. Møllers Allé 46, 3tv || http://www.zz9.dk
2300 København S ||
More information about the Fingerforce-devel