Ask Your Question
3

F28 fingerprint reader for gnome

asked 2018-06-06 08:29:15 -0600

tablepc gravatar image

I am looking for a fingerprint reader that works with fedora gnome so a fingerprint can be a second credential for logging in.

Is there software that will support this?

Are there any recommendations for reader hardware?
edit retag flag offensive close merge delete

Comments

Any fingerprint reader that is supported by the Linux kernel will work with Fedora. Fedora ships software that lets you do authentication (login and sudo command) with your fingerprint. The packages you need are fprintd-pam, fprintd and libfprint.

I have tried it once out of curiosity (using the Thinkpad’s internal reader), and it worked just fine. However, I don’t think it adds security!

florian gravatar imageflorian ( 2018-06-06 08:39:57 -0600 )edit

Thanks for the information. I see that Fedora has all three already installed. I see what you mean. When I was reading about it at Freedesktop.org they say the f print data is stored in an unencrypted file, but of course the file has the usual protections. I looked through the man page for fprint and the information on the fprint pages on freedesktop.org. It was quite clear about how to register user names and f prints in the database, but I didn't see how to associate a user's print with an action. Is there another source of documentation or have I missed something?

tablepc gravatar imagetablepc ( 2018-06-06 13:15:29 -0600 )edit

Not sure what you mean by "how to associate a user's print with an action", but if you're just looking for fingerprint auth on login then the default gnome UI works (at least the last time I used it on my built in fingerprint scanner on a Lenovo X1 Carbon)

https://help.gnome.org/users/gnome-he...

Unfortunately their official documentation is pretty sparse beyond that AFAICT, so if you're looking to do anything more interesting then it may take some digging.

erickj gravatar imageerickj ( 2018-06-07 04:06:20 -0600 )edit

I'm hoping that I can have the finger print be an additional credential, in addition to user name and password. That way to login, a user would need to present their user name, password, and fingerprint. Though not necessarily in that order. I was thinking of using smart cards or yubikeys, but they are easier to loose, misplace, etc. than fingerprints. Also I'm guessing that the implementation of those is at lease as much effort as fingerprint. Thanks for your help.

tablepc gravatar imagetablepc ( 2018-06-07 08:15:55 -0600 )edit

I see 2FA with fingerprints. Is that a PAM auth module that would handle 2FA?

Maybe trying to dig through these PAM mods would be helpful?

erickj gravatar imageerickj ( 2018-06-07 12:59:58 -0600 )edit

1 Answer

Sort by » oldest newest most voted
0

answered 2018-06-10 14:31:03 -0600

tablepc gravatar image

I got what I needed to know in the chain of comments above. Thank you Very Much for your help

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-06-06 08:29:15 -0600

Seen: 2,777 times

Last updated: Jun 10