• Rob Johnson's avatar
    pam: return PAM_UNKNOWN_USER when user is unenrolled · b4f53045
    Rob Johnson authored
    This commit makes pam_fprintd return PAM_UNKNOWN_USER when
    the user has not enrolled a fingerprint.
    
    This lets the administrator set up pam_fprintd as a required
    authentication, method, but only for users that have enrolled a
    fingerprint, as such:
    
    auth  [success=ok user_unknown=ignore default=die] pam_fprintd.so max_tries=1 timeout=-1
    auth  [success=1  default=ignore]                  pam_unix.so nullok_secure
    auth  requisite                                    pam_deny.so
    
    With this config, users w/o an enrolled fingerprint will just be
    asked for a password.  Users with an enrolled fingerprint will
    required to login using both their fingerprint and a password.
    
    https://bugs.freedesktop.org/show_bug.cgi?id=64781
    b4f53045
Name
Last commit
Last update
.tx Loading commit data...
data Loading commit data...
doc Loading commit data...
pam Loading commit data...
po Loading commit data...
src Loading commit data...
tests Loading commit data...
.gitignore Loading commit data...
AUTHORS Loading commit data...
COPYING Loading commit data...
ChangeLog Loading commit data...
INSTALL Loading commit data...
Makefile.am Loading commit data...
NEWS Loading commit data...
README Loading commit data...
README.transifex Loading commit data...
TODO Loading commit data...
acinclude.m4 Loading commit data...
autogen.sh Loading commit data...
configure.ac Loading commit data...
git.mk Loading commit data...