https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c2 --- Comment #2 from Petr Uzel 2012-08-08 15:41:05 UTC --- (In reply to comment #1)

Do you know what was the output of 'pam-config --q --fprint' before and after your changes?

Now, when fingerprint reader works fine, 'pam-config -q --fprint' prints just 'auth:\n'. I don't know what it was before, sorry. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c4 Andrey Borzenkov changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |arvidjaar@gmail.com --- Comment #4 from Andrey Borzenkov 2012-10-04 15:36:43 UTC --- I confirm this bug including y2log content. (In reply to comment #1)

Do you know what was the output of 'pam-config --q --fprint' before and after your changes?

opensuse:/var/log/YaST2 # LC_ALL=C pam-config --q --fprint pam-config: invalid option -- --q Try `pam-config --help' or `pam-config --usage' for more information. opensuse:/var/log/YaST2 # LC_ALL=C pam-config -q --fprint opensuse:/var/log/YaST2 # echo $? 0 opensuse:/var/log/YaST2 # cat /etc/SuSE-release openSUSE 12.2 (x86_64) VERSION = 12.2 CODENAME = Mantis opensuse:/var/log/YaST2 # and from y2log 2012-10-04 18:44:24 <3> opensuse.site(10900) [bash] ShellCommand.cc(shellcommand):78 ERROR: pam_fprintd.so is enabled. In order to use pam_fprint.so you need to disable it first! 2012-10-04 18:44:24 <2> opensuse.site(10900) [YCP] Pam.ycp:79 pam-config for fprint returned $["exit":1, "stderr":"WARNING: Found module 'pam_fprintd.so' in file 'gdm-fingerprint'.\nERROR: pam_fprintd.so is enabled. In order to use pam_fprint.so you need to disable it first!\n", "stdout":""] -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c Joachim Banzhaf changed: What |Removed |Added ---------------------------------------------------------------------------- Version|RC 1 |Final -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c7 Eduard Goiu changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |egoiu@fum.de Target Milestone|--- |Final --- Comment #7 from Eduard Goiu 2012-11-27 21:14:43 UTC --- I confirm the bug too. I installed 12.2 from scratch and tried to setup fingerprint authentication and got the following error message: Cannot write PAM settings. Below a dump of y2log. I confirm also the fix explained by Joachim Banzhaf at the 5th Comment. I removed /etc/pam.d/gdb-fingerprint and started again the process. It worked! 2012-11-27 21:54:20 <1> 911.global.fum(2335) [YCP] Progress.ycp:380 Progress::New(Saving Fingerprint Reader Configuration, 2, ["Write the PAM settings", "Import fingerprint files"]) 2012-11-27 21:54:20 <1> 911.global.fum(2335) [YCP] Progress.ycp:469 No progress icons defined 2012-11-27 21:54:20 <3> 911.global.fum(2335) [bash] ShellCommand.cc(shellcommand):78 WARNING: Found module 'pam_fprintd.so' in file 'gdm-fingerprint'. 2012-11-27 21:54:20 <3> 911.global.fum(2335) [bash] ShellCommand.cc(shellcommand):78 ERROR: pam_fprintd.so is enabled. In order to use pam_fprint.so you need to disable it first! 2012-11-27 21:54:20 <2> 911.global.fum(2335) [YCP] Pam.ycp:79 pam-config for fprint returned $["exit":1, "stderr":"WARNING: Found module 'pam_fprintd.so' in file 'gdm-fingerprint'.\nERROR: pam_fprintd.so is enabled. In order to use pam_fprint.so you need to disable it first!\n", "stdout":""] 2012-11-27 21:54:20 <3> 911.global.fum(2335) [YCP] Report.ycp:523 Cannot write PAM settings. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c10 --- Comment #10 from Timo Hoenig 2012-11-28 08:43:23 UTC --- Which packages are the owner of the offending /etc/pam.d/gdb-* files? I do not have those on my system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c12 Timo Hoenig changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Basesystem |GNOME AssignedTo|thoenig@novell.com |bnc-team-gnome@forge.provo. | |novell.com --- Comment #12 from Timo Hoenig 2012-11-28 11:06:11 UTC --- Thanks for the quick reply, Joachim. Let's see what the GNOME maintainers say to this. I assume that we simply do not need the offending file (/etc/pam.d/gdb-fingerprint) for openSUSE and, hence, should remove it from the GDM package. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c14 David Liang changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dliang@suse.com --- Comment #14 from David Liang 2012-11-29 07:06:06 UTC --- 1. gdm in opensuse12.1 will not install /etc/pam.d/gdm-fingerprint if the 'enable_split_authentication' macro were set to false. And it is set to false in our build server. gdm in opensuse12.2 will always install /etc/pam.d/gdm-fingerprint. This makes the difference. 2. gdm uses the upstream gdm-fingerprint.pam file with the content 'auth required pam_fprintd.so'. I find the upstream project fprintd, the pam so was named as pam_fprintd.so but in opensuse, it is pam_fprint.so. Not sure if these names should be the same. I could add a patch to make our 'gdm-fingerprint' consistent with our pam_fprint. In my test, it works. 3. yast seems to recognize 'pam_fprint.so' the same lib with 'pam_fprintd.so'. Not sure why it would do this, the consistence issue in 2? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c16 Dominique Leuenberger changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dimstar@opensuse.org --- Comment #16 from Dominique Leuenberger 2012-11-29 22:33:31 UTC --- Looking at all this, my first reaction is: - Why are we still relying on pam_fprint (0.2) (which brings pam_fprint.so) instead of pam_fprintd, part of fprintd 0.4 (which we seem not even to have in openSUSE yet). Somebody with a good understanding of those pam_fprint vs fprintd should likely comment (the latter seems still to have activity.. as opposed to the former). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c18 --- Comment #18 from Dominique Leuenberger 2012-11-30 08:52:38 UTC --- (In reply to comment #17)

While this is interesting discussion for Factory/12.3, the fact is that configuring fingerprint authentication with YaST2 is broken on 12.2. And that needs fixing. Switching from pam_fprint to fprintd is likely not an option for 12.2, but removing those unneeded files shipped with GDM is.

Yes, I agree on that part! Sorry, that was not clear. AS it's a rather 'simple' change to do: would you be willing to work on the update/maintenance release? I'll gladly guide you if you want (easiest if you can join IRC) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c20 --- Comment #20 from Andrey Borzenkov 2012-11-30 17:50:45 UTC --- Could somebody with FP reader test this: zypper ar http://download.opensuse.org/repositories/home:/arvidjaar:/bnc:/772948/openS... bnc772948 zypper refresh -r bnc772948 zypper dup -r bnc772948 It works for me (in the sense I can enable pam_fprint) but I cannot enroll my fingerprint and I do not know whether this is hardware, kernel or something else. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c22 --- Comment #22 from Andrey Borzenkov 2013-01-19 18:39:48 UTC --- OK, I submitted maintenance request #149249. Anything else I need to do? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c24 --- Comment #24 from Benjamin Brunner 2013-01-21 12:09:29 CET --- Andrey, thanks for your submission. I started an update (see openSUSE:Maintenance:1242 Dominique, Petr do we need the fix in the devel-project GNOME:Factory, too? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=772948 https://bugzilla.novell.com/show_bug.cgi?id=772948#c26 Benjamin Brunner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #26 from Benjamin Brunner 2013-01-28 11:55:11 CET --- Update released for openSUSE 12.2. Resolved fixed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.