32.2 Managing Fingerprints with YaST
Enabling Fingerprint Authentication
You can only use biometric authentication if PAM is configured
accordingly. Usually, this is done automatically during installation of
the packages when the hardware check detects a supported fingerprint
reader. If not, manually enable the fingerprint support in YaST as
follows:
-
Start YaST and select .
-
In the configuration dialog, activate and click to save the
changes and close the dialog.
Now you can register a fingerprint for various users.
Registering a Fingerprint
-
In YaST, click to open the
dialog. A list of
users or groups in the system is displayed.
-
Select the user for whom you want to register a fingerprint and click
.
-
On the tab, select the fingerprint entry
and click to open the dialog.
-
YaST prompts the user to swipe his finger until three readable
fingerprints have been gathered.
-
After the fingerprint has been acquired successfully, click
to close the dialog and the dialog for the user.
-
If you also want to use fingerprint authentication for starting YaST
or the YaST modules, you need to register a fingerprint for
root, too.
To do so, set the filter in the dialog to ,
select the root entry and register a fingerprint for root
as described above.
-
After you have registered fingerprints for the desired users, click
to close the administration dialog and to
save the changes.
As soon as the user's fingerprint has been successfully registered, the
user can choose to authenticate with either fingerprint or password for
the actions and applications listed in
Section 32.1, Supported Applications and Actions.
Currently, YaST does not offer verification or removal of fingerprints,
but you remove fingerprints by deleting the directory
/home/login/.fprint.
For more technical details, refer to
https://reactivated.net/fprint/.
