On 27/12/16 20:26, Bastien Nocera wrote: > On Tue, 2016-12-27 at 18:45 +0100, emak wrote: >> Hi >> >> I wanted to enter whether the password or use the fprint-reader. As >> the >> fprint-reader is not alwas faster (e.g. remote login / close laptop >> lid >> in docking station) I set this default order in my /etc/pam.d/system- >> auth: >> auth sufficient pam_unix.so try_first_pass nullok >> auth required pam_fprintd.so >> ... >> >> I then realized, that gnome-keyring get's not succesfully unlocked if >> "pam_unix.so" is only set to "sufficient" instead of "required". So I >> switched the order to: >> auth sufficient pam_fprintd.so >> auth required pam_unix.so try_first_pass nullok >> ... >> >> That would be okay for me if I could set the timeout / max_tries >> lower, >> but somehow this doesn't work. I am using following config in my >> /etc/pam.d/system-auth now, which doesn't seem to work: >> auth sufficient pam_fprintd.so max_tries=2 timeout=3 >> auth required pam_unix.so try_first_pass nullok >> ... >> >> I could not find anything on your website nor in the delivered docu >> on >> how to change/use those parameters. Your advice would greatly be >> appreciated. > It's "max-tries=..." not max_tries: > https://cgit.freedesktop.org/libfprint/fprintd/tree/pam/pam_fprintd.c#n46 > > You can use "debug" to see more information in the system logs. > > Cheers
Perfect, thanks! I also found out therefore that the min timeout is 10s - that's why this was working neither on my tests with a timeout = 3 ;) _______________________________________________ fprint mailing list [email protected] https://lists.freedesktop.org/mailman/listinfo/fprint
