Hi Justin!
Yes, it's exactly what it should be: you can authenticate yourself
with your fingerprint *OR* the password.
Have you read the upstream README [1], specifically the section
regarding the PAM module? You need something like the following to
--8<---------------cut here---------------start------------->8---
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
auth sufficient pam_thinkfinger.so
auth required pam_unix.so nullok_secure try_first_pass
--8<---------------cut here---------------end--------------->8---
If you use pam_unix2.so, try_first_pass is automatically enabled, so
you don't need it.
Frankly speaking, this is a gksu and gksudo problem: I won't remove
the "or scan finger" prompt only to have ThinkFinger working with
these programs. I'd rather asks upstream authors to fix their PAM
implementation, since su/sudo works nicely.
Not if you read the docs before ;-)
Thx, bye,
Gismo / Luca
[1] http://thinkfinger.svn.sourceforge.net/viewvc/thinkfinger/README.in?view=markup