boltgolt / howdy

🛡️ Windows Hello™ style facial authentication for Linux
MIT License
5.9k stars 307 forks source link

Sudo does not use howdy on Ubuntu 23.04 #856

Open emma-freeman-plym opened 1 year ago

emma-freeman-plym commented 1 year ago

I've added a model, and checked it works with sudo /lib/security/howdy/cli.py test. The file /usr/share/pam-configs/howdy is correct. pam-auth-update lists howdy as enabled. But sudo -i doesn't enable the IR camera, it just shows password auth. Any idea why?

saidsay-so commented 1 year ago

What is the content of the /etc/pam.d/sudo file?

emma-freeman-plym commented 1 year ago

Nothing mentioning howdy:

#%PAM-1.0

# Set up user limits from /etc/security/limits.conf.
session    required   pam_limits.so

session    required   pam_env.so readenv=1 user_readenv=0
session    required   pam_env.so readenv=1 envfile=/etc/default/locale user_readenv=0

@include common-auth
@include common-account
@include common-session-noninteractive
techonerd commented 1 year ago

What is the content of the /etc/pam.d/sudo file?

#%PAM-1.0

# Set up user limits from /etc/security/limits.conf.
auth   sufficient        pam_python.so /lib/security/howdy/pam.py
session    required   pam_limits.so

@include common-auth
@include common-account
@include common-session-noninteractive

Is this the expected output? I think I added **/howdy/pam.py there manually by following some troubleshooting guides. Not sure if this is the expected content of the file.

saidsay-so commented 11 months ago

This isn't the expected output indeed, it should have an entry for howdy. If you put this in the file, it should work.

auth   sufficient        pam_python.so /lib/security/howdy/pam.py