Hi Justin!
Post by Justin DuggerIs it just me, or does the prompt make no sense?
Yes, it's exactly what it should be: you can authenticate yourself
with your fingerprint *OR* the password.
Post by Justin DuggerI can scan my finger, but if I type my password it rejects it.
Have you read the upstream README [1], specifically the section
regarding the PAM module? You need something like the following to
have your password being accepted instead of the fingerprint:
--8<---------------cut here---------------start------------->8---
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass
--8<---------------cut here---------------end--------------->8---
If you use pam_unix2.so, try_first_pass is automatically enabled, so
you don't need it.
Post by Justin DuggerIn this case, the prompt "Password or scan finger:" not only breaks
silly programs like gksu and gksudo
Frankly speaking, this is a gksu and gksudo problem: I won't remove
the "or scan finger" prompt only to have ThinkFinger working with
these programs. I'd rather asks upstream authors to fix their PAM
implementation, since su/sudo works nicely.
Post by Justin Duggerbut is also misleading in the normal case!
Not if you read the docs before ;-)
Thx, bye,
Gismo / Luca
Footnotes:
[1] http://thinkfinger.svn.sourceforge.net/viewvc/thinkfinger/README.in?view=markup