[Thinkfinger-devel] Integration in PAM for Mandriva 2007.0 fails

[Oliver Ebert]

Hi,

the installation of thinkfinger 0.3 on my Toshiba laptop P105 with
Mandriva 2007.0seems to work fine and and the test with..

tf-tool --acquire
tf-tool --verify

worked great as well. So I configured /etc/pam.d/system-auth..

auth required pam_env.so
auth sufficient pam_thinkfinger.so
auth sufficient pam_unix.so likeauth nullok try_first_pass
auth required pam_deny.so

..and tested with pamtester..

[***@hinkelstein ~]# pamtester -v login oliver authenticate
pamtester: invoking pam_start(login, oliver, ...)
pamtester: performing operation - authenticate
Password or swipe finger:

..and everything works great. But if I try su or an other PAM
based service it just seems to ignore the changed PAM configuration:

[***@hinkelstein ~]$ su - oliver
Password:


Thanks a lot in advance,



Oliver

[Timo Hoenig]

Hi Oliver,

Post by Oliver Ebert
the installation of thinkfinger 0.3 on my Toshiba laptop P105 with
Mandriva 2007.0seems to work fine and and the test with..
tf-tool --acquire
tf-tool --verify
worked great as well. So I configured /etc/pam.d/system-auth..
auth required pam_env.so
auth sufficient pam_thinkfinger.so
auth sufficient pam_unix.so likeauth nullok try_first_pass
auth required pam_deny.so
..and tested with pamtester..
pamtester: invoking pam_start(login, oliver, ...)
pamtester: performing operation - authenticate
..and everything works great. But if I try su or an other PAM

This should be a PAM configuration issue. As I am not familiar with
Mandriva I cannot help much here, sorry.

Timo

[José Plans]

Post by Timo Hoenig
Hi Oliver,

Post by Oliver Ebert
the installation of thinkfinger 0.3 on my Toshiba laptop P105 with
Mandriva 2007.0seems to work fine and and the test with..
tf-tool --acquire
tf-tool --verify
worked great as well. So I configured /etc/pam.d/system-auth..
auth required pam_env.so
auth sufficient pam_thinkfinger.so

Please add 'debug' and see what you get in the logs...

Post by Timo Hoenig

Post by Oliver Ebert
pamtester: invoking pam_start(login, oliver, ...)
pamtester: performing operation - authenticate

The pamtester was used with root but your call was done with a non admin
user. Maybe you are facing a "Permission denied" issue ?

Jose