think finger

[Bastien Nocera]

Heya,

On Thu, 2007-10-25 at 10:06 -0400, Jeremy Katz wrote:
> On Thu, 2007-10-25 at 08:55 -0400, Bryan Clark wrote:
> > Pushing off from Ben's email on new user creation [1] I wanted to get 
> > some setup for the think finger support that david mentioned [2].
> 
> I'd actually like to make it a teensy bit more general and think about
> the non-Thinkfinger readers also.  From my Pile Of Laptops, the
> Authentec readers are pretty common.  And davidz has already done some
> prodding with them based on his blog ;)  

The plan for the F9 feature[1] was to not use pam_thinkfinger (it's real
crap, and has some gross hacks, such as sending line feeds to accept
password auth), and switch to a dbus service instead (so that we don't
do threading in pam_thinkfinger).

The dbus service would be a HAL singleton, and we could obviously use a
different implementation that could drive Authentec readers, or any
other, given a sane API.

> While not very relevant to the interaction, it's mostly important so
> that we don't make assumptions of hardware capabilities that may or may
> not be present.
> 
> > Can it's presence be detected automatically?  And it's (pam) 
> > authentication be added automatically?
> 
> They're all usb devices, so pretty detectable.  Adding the pam config is
> just a matter of deciding we're doing it and then adding to the stacks
> written out by authconfig

And for which PAM services we'd want to enable this.

Cheers