search

uunicorn / python-validity

Validity fingerprint sensor prototype
MIT License
990 stars 83 forks source link

Add additional info to README for KDE / SDDM #184

Open VitaliFrolov opened 11 months ago

VitaliFrolov commented 11 months ago

Hi, thanks for a great work! I can now use my fingerprint sensor on my Thinkpad.

I would like to request that if possible to include following info regarding setting up open-fprintd on KDE with SDDM from Arch WiKi:

Note: Make sure that your fingerprint is registered before making these changes. Fingerprint support is not completely working properly yet, and it seems logging in with only a password no longer works using this method.

SDDM works with a fingerprint reader when using fprint. After installing fprint and adding fingerprint signatures, add the following to the top of /etc/pam.d/sddm:

/etc/pam.d/sddm

auth sufficient pam_fprintd.so

In order to use either a password or a fingerprint, you can instead add the following to the top of the file:

/etc/pam.d/sddm

auth [success=1 new_authtok_reqd=1 default=ignore] pam_unix.so try_first_pass likeauth nullok auth sufficient pam_fprintd.so

Note that KWallet cannot be unlocked using a fingerprint reader (see KDE Wallet#Unlock KDE Wallet automatically on login), but the first line ensures that a password login will automatically unlock KWallet. Tip: To make this work in KDE's lock screen, you can add the following lines at the beginning of /etc/pam.d/kde:

/etc/pam.d/kde

auth sufficient pam_unix.so try_first_pass likeauth nullok auth sufficient pam_fprintd.so

The first line looks different from the corresponding /etc/pam.d/sddm configuration because the KDE lock screen does not need to run the KWallet pam module.

If you now press enter in the empty password field, the fingerprint reader should start working.

Or maybe just include a link to the wiki article:

https://wiki.archlinux.org/title/SDDM

I followed the steps above on Debian 12 running KDE with SDDM and after restart everything is working as expected. Without above steps if you just run "sudo pam-auth-update" and select fingerprint login you will not be able to log in to KDE anymore, fingerprint will not work and if you try with password it will just freeze.