Below is a script I have put together which on a debian/ubuntu/kubuntu system should convert KDE to use biometric login :

It installs libfprint0 libpam-fprint fprint-demo libfprint-dev
then updates common-auth for pam.d to:

auth sufficient pam_fprint.so
auth required pam_unix.so nullok_secure

then enrolls your fingers (you can use fprint_demo GUI) to do same

and requires a restart for changes to take affect -

I wonder if there is anyway of removing the initial ENTER on password so like gnome KDE asks for password or finger swipe....


Also kdewallet never asks for fingerprint anyway this can also use pam.d for auth ?

run code as current user logged in - it will ask for sud password

Code: Select all

#!/bin/sh

echo "installing biometric packages"
sudo apt-get install libfprint0 libpam-fprint  fprint-demo libfprint-dev


echo "updating pam to authorize fingerprint authorisation"
echo "backed up to /etc/pam.d/common-auth.$$ - if you wish to remove biometric restore the file to /etc/pam.d/common-auth"

echo "CURRENT CONFIG: "
echo "______________________________________________________"
cat  /etc/pam.d/common-auth |grep -v "^#"
echo "______________________________________________________"

sudo cp /etc/pam.d/commmon-auth /etc/pam.d/common-auth.$$

echo "File backed up - now changing common-auth to:"
echo "______________________________________________________"
echo "auth sufficient pam_fprint.so"
echo "auth required pam_unix.so nullok_secure"
echo "______________________________________________________"

sudo echo "auth sufficient pam_fprint.so"> /etc/pam.d/common-auth
sudo echo "auth required pam_unix.so nullok_secure" >> /etc/pam.d/common-auth
echo "all done - now setting up fingers"

#enroll finger number from left thumb being 1  2 for left index 6 for right thumb 7 for right index till 10..

sudo pam_fprint_enroll --enroll-finger 2
echo "For some reason it always asks for thumb so I enrolled Thumb as index"
sudo pam_fprint_enroll --enroll-finger 6
sudo pam_fprint_enroll --enroll-finger 7
echo "all ssh and kde session etc will now require finger specified to log in"
echo " please reboot machine and press enter on initial password"