C守护进程 文章来源网络（备用）
使用file_get_contents提交http post 自phpec
2008/01/24 11:00 | by
IBM T61P + uBuntu 装指纹系统
安装方法
先去http://thinkfinger.sourcef... 下载 tf-tool 3.0
或 下载下面的 附件
下下来 是个 压缩包 放在 根目录下
安装 gcc编译环境 libtool pkg-config libpam0g-dev libusb-dev
可使用apt-get更新安装
sudo apt-get install libtool pkg-config libpam0g-dev libusb-dev build-essential
将下下来的压缩包 解压
tar -xzvf thinkfinger-0.3.tar.gz
进入 解压出来的目录
cd thinkfinger-0.3
然后
./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger
由于默认的prefix是/usr/local，如果不加此参数，则指纹数据会放在/usr/local/etc/pam_thinkfinger，而 thinkfinger需要用户指纹数据放在/etc/pam_thinkfinger下（上面这个是每个教程 不同的 地方 ）
然后
make
sudo make install
下面是配置
sudo tf-tool --acquire
测试是否正常获取指纹数据
需要输入3次测试指纹
sudo tf-tool --verify
验证是否可以正确识别
sudo mkdir -p /etc/pam_thinkfinger
创建需要的目录
sudo gedit /etc/pam.d/common-auth
修改/etc/pam.d/common-auth文件
＃
＃
auth sufficient pam_thinkfinger.so
auth required pam_unix.so try_first_pass
sudo tf-tool --add-user YOUR_USER_NAME
重启系统后加入你需要调用指纹认证模块的用户名
这样 就 完成了- -”
当你 进入系统时 输入你的需验证的用户名
会提示 Password or swipe finger
我们 可以把他改成中文的提示
把下下来的压缩包 解压后 进入PAM文件夹
找到 Pam_thinkfinger.c 打开
替换 Password or swipe finger 为 （你要 显示的中文提示）
比如 请输入指纹
然后 编译安装 就可以了
Install ThinkFinger on Ubuntu
Thinkfinger is a free driver for the SGS Thomson Microelectronics fingerprint reader that you can find on most Lenovo/Thinkpad, Dell and Toshiba. Be aware that ThinkFinger only works for this specific model, some Lenovo/Dell/Toshiba laptops are using other models.
[WWW] ThinkFinger website
This howto was written for ThinkFinger 0.2.2 on a [WWW] Toshiba Satellite U200-163 running Edgy.
Warning : Thinkfinger is still beta-software. Installing it will break some things or not work as expected. Do not install it if you are not an experienced user. See the "known problems" sections below.
Packages
Thinkfinger 0.2.2 package is [WWW] available here. Just download it and install it by clicking on it. (works in Edgy). You can then skip the "Download and compile" section.
Thinkfinger 0.3 is available from a PPA in gutsy.
deb http://ppa.launchpad.net/j... gutsy main restricted universe multiverse
deb-src http://ppa.launchpad.net/j... gutsy main restricted universe multiverse
Just add to your software sources, as it will likely see published updates over time. To install it, after you added the PPA sources :
sudo apt-get install thinkfinger-tools libpam-thinkfinger
For the moment you still need to follow the steps below to register a new user.
Download and compile
1.
Download and untar the source code from the [WWW] Sourceforge page
2.
Install required dependencies
sudo apt-get install build-essential libtool libusb-dev libpam0g-dev pkg-config
3.
Create the directory that will store fingerprints
sudo mkdir /etc/pam_thinkfinger
4.
Configure and compile the whole thing (3 commands to run separatly in the source folder you just unzipped above):
./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger
make
sudo make install
Test the fingerprint reader
We will acquire a fingerprint that we will store temporarly to test if the reader works properly.
1.
Acquire the fingerprint with the command
sudo tf-tool --acquire
It will ask for your fingerprint 3 times (or more if there are failed scans).
2.
Test your fingerprint
sudo tf-tool --verify
It will tell you if the scan match the one acquired above.
A typical test session is something like this :
ploum@spoutnik:~$ sudo tf-tool --acquire
ThinkFinger 0.2.2 (http://thinkfinger.sourcef...
Copyright (C) 2006, 2007 Timo Hoenig
Initializing... done.
Please swipe your finger (successful swipes 3/3, failed swipes: 0)... done.
Storing data (/tmp/test.bir)... done.
ploum@spoutnik:~$ sudo tf-tool --verify
ThinkFinger 0.2.2 (http://thinkfinger.sourcef...
Copyright (C) 2006, 2007 Timo Hoenig
Initializing... done.
Please swipe your finger (successful swipes 1/1, failed swipes: 0)... done.
Result: Fingerprint does match.
Note:
If you encounter the following error,
ploum@spoutnik:~$ sudo tf-tool --acquire
tf-tool: error while loading shared libraries: libthinkfinger.so.0: cannot open shared object file: No such file or directory
It can be easily fixed by running ldconfig as follows:
ploum@spoutnik:~$ sudo ldconfig
Use it everyday !
We will now tell PAM to use the fingerprint scanner so you can just swipe your finger instead of typing your password.
1.
Modify the file /etc/pam.d/common-auth so it looks like :
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the
# traditional Unix authentication mechanisms.
#
auth sufficient pam_thinkfinger.so
auth required pam_unix.so try_first_pass nullok_secure
In fact you just have to add the auth line for pam_thinkfinger before the next line and you have to add the try_first_pass argument.
2.
Add your fingerprint in the known fingerprint database :
sudo tf-tool --add-user your_login
That's all ! You can now log yourself from GDM or in console by simply swiping your finger ! If the shell says some error like "Unable to set ACL of aquired file: /etc/pam_thinkfinger/your-login.bir: Operation not supported", you are safe to ignore it. Or you can add the mount option "acl" to the root filesystem:
/dev/sda1 / ext3 defaults,acl,noatime,errors=remount-ro 0 1
Known problems
*
Biggest problem : gksudo will become "invisible". It means that if you launch any program with gksudo, it will wait forever until your swipe your finger without displaying anything on the screen. For example, if you launch synaptic from the menu, nothing will happen. Swipe your finger and synaptic appears! (This is [WWW] bug #86843 or [WWW] upstream bug #19132)
*
Gnome-keyring doesn't use PAM. So you have to type your password. A [WWW] workaround for gnome-keyring is available, but this doesn't work if you authenticated via fingerprint. Same holds for pam_ssh.
*
Gnome-screensaver doesn't ask for your fingerprint. You have to type your password as usual. This is [WWW] bug #411293. FIXXED: [WWW] http://en.thinkwiki.org/wi...
*
It's not translated. You will see "Password or swipe finger:" in English, not in your locale. You can fix gdm, adding ThinkFinger message to perhaps_translate_message() in daemon/verify-pam.c. Then you need to regenerate POT file and update PO file for your language.
*
Does not seem to work properly with Kubuntu: login session does not work with fingerprints (there's a [WWW] bug report for KDM), "kdesu" applications fail to start, sometimes root launching succeeds without any authentification at all, ... But basic fingerprinting works perfectly for "tf-tool" (create or verify fingerprints).
F.A.Q
*
Can I still use a regular password ?
*
Yes. The "enter your password" will be replaced by "Enter your password or swipe your finger". You can still use your password if you are wearing gloves (just an example)
*
I have a "Could not claim USB device" error
*
You must run tf-tool as root or use "sudo" in front of the command.
*
I still need to type my login. I want to only swipe my finger.
*
Indeed, it would be cool. This is a feature currently not supported by Thinkfinger but it might be available in future releases.
*
0.2.3 or superior doesn't work !
*
Just keep 0.2.2 for now. 0.2.3 requires the uinput module (that can be loaded with a simple sudo modprobe uinput) so it's easier to stick with 0.2.2 until all issues are solved. Alternatively justr add uinput to /etc/modules to make sure it always loads.
To be able to use ThinkFinger 0.3
To be able to use ThinkFinger 0.3 you have to load the kernel module "uinput". To check if it is loaded already:
$ lsmod | grep uinput
Load this module, if it's not loaded:
$ sudo modprobe uinput
or you can add it to the list in "/etc/modules" to make it load automatically at boot time:
$ sudo nano -w /etc/modules
or
$ sudo gedit /etc/modules
Typically it looks like this:
# /etc/modules: kernel modules to load at boot time.
#
# This file contains the names of kernel modules that should be loaded
# at boot time, one per line. Lines beginning with "#" are ignored.
fuse
lp
sbp2
uinput
安装方法
先去http://thinkfinger.sourcef... 下载 tf-tool 3.0
或 下载下面的 附件
下下来 是个 压缩包 放在 根目录下
安装 gcc编译环境 libtool pkg-config libpam0g-dev libusb-dev
可使用apt-get更新安装
sudo apt-get install libtool pkg-config libpam0g-dev libusb-dev build-essential
将下下来的压缩包 解压
tar -xzvf thinkfinger-0.3.tar.gz
进入 解压出来的目录
cd thinkfinger-0.3
然后
./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger
由于默认的prefix是/usr/local，如果不加此参数，则指纹数据会放在/usr/local/etc/pam_thinkfinger，而 thinkfinger需要用户指纹数据放在/etc/pam_thinkfinger下（上面这个是每个教程 不同的 地方 ）
然后
make
sudo make install
下面是配置
sudo tf-tool --acquire
测试是否正常获取指纹数据
需要输入3次测试指纹
sudo tf-tool --verify
验证是否可以正确识别
sudo mkdir -p /etc/pam_thinkfinger
创建需要的目录
sudo gedit /etc/pam.d/common-auth
修改/etc/pam.d/common-auth文件
＃
＃
auth sufficient pam_thinkfinger.so
auth required pam_unix.so try_first_pass
sudo tf-tool --add-user YOUR_USER_NAME
重启系统后加入你需要调用指纹认证模块的用户名
这样 就 完成了- -”
当你 进入系统时 输入你的需验证的用户名
会提示 Password or swipe finger
我们 可以把他改成中文的提示
把下下来的压缩包 解压后 进入PAM文件夹
找到 Pam_thinkfinger.c 打开
替换 Password or swipe finger 为 （你要 显示的中文提示）
比如 请输入指纹
然后 编译安装 就可以了
Install ThinkFinger on Ubuntu
Thinkfinger is a free driver for the SGS Thomson Microelectronics fingerprint reader that you can find on most Lenovo/Thinkpad, Dell and Toshiba. Be aware that ThinkFinger only works for this specific model, some Lenovo/Dell/Toshiba laptops are using other models.
[WWW] ThinkFinger website
This howto was written for ThinkFinger 0.2.2 on a [WWW] Toshiba Satellite U200-163 running Edgy.
Warning : Thinkfinger is still beta-software. Installing it will break some things or not work as expected. Do not install it if you are not an experienced user. See the "known problems" sections below.
Packages
Thinkfinger 0.2.2 package is [WWW] available here. Just download it and install it by clicking on it. (works in Edgy). You can then skip the "Download and compile" section.
Thinkfinger 0.3 is available from a PPA in gutsy.
deb http://ppa.launchpad.net/j... gutsy main restricted universe multiverse
deb-src http://ppa.launchpad.net/j... gutsy main restricted universe multiverse
Just add to your software sources, as it will likely see published updates over time. To install it, after you added the PPA sources :
sudo apt-get install thinkfinger-tools libpam-thinkfinger
For the moment you still need to follow the steps below to register a new user.
Download and compile
1.
Download and untar the source code from the [WWW] Sourceforge page
2.
Install required dependencies
sudo apt-get install build-essential libtool libusb-dev libpam0g-dev pkg-config
3.
Create the directory that will store fingerprints
sudo mkdir /etc/pam_thinkfinger
4.
Configure and compile the whole thing (3 commands to run separatly in the source folder you just unzipped above):
./configure --with-securedir=/lib/security --with-birdir=/etc/pam_thinkfinger
make
sudo make install
Test the fingerprint reader
We will acquire a fingerprint that we will store temporarly to test if the reader works properly.
1.
Acquire the fingerprint with the command
sudo tf-tool --acquire
It will ask for your fingerprint 3 times (or more if there are failed scans).
2.
Test your fingerprint
sudo tf-tool --verify
It will tell you if the scan match the one acquired above.
A typical test session is something like this :
ploum@spoutnik:~$ sudo tf-tool --acquire
ThinkFinger 0.2.2 (http://thinkfinger.sourcef...
Copyright (C) 2006, 2007 Timo Hoenig
Initializing... done.
Please swipe your finger (successful swipes 3/3, failed swipes: 0)... done.
Storing data (/tmp/test.bir)... done.
ploum@spoutnik:~$ sudo tf-tool --verify
ThinkFinger 0.2.2 (http://thinkfinger.sourcef...
Copyright (C) 2006, 2007 Timo Hoenig
Initializing... done.
Please swipe your finger (successful swipes 1/1, failed swipes: 0)... done.
Result: Fingerprint does match.
Note:
If you encounter the following error,
ploum@spoutnik:~$ sudo tf-tool --acquire
tf-tool: error while loading shared libraries: libthinkfinger.so.0: cannot open shared object file: No such file or directory
It can be easily fixed by running ldconfig as follows:
ploum@spoutnik:~$ sudo ldconfig
Use it everyday !
We will now tell PAM to use the fingerprint scanner so you can just swipe your finger instead of typing your password.
1.
Modify the file /etc/pam.d/common-auth so it looks like :
#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.). The default is to use the
# traditional Unix authentication mechanisms.
#
auth sufficient pam_thinkfinger.so
auth required pam_unix.so try_first_pass nullok_secure
In fact you just have to add the auth line for pam_thinkfinger before the next line and you have to add the try_first_pass argument.
2.
Add your fingerprint in the known fingerprint database :
sudo tf-tool --add-user your_login
That's all ! You can now log yourself from GDM or in console by simply swiping your finger ! If the shell says some error like "Unable to set ACL of aquired file: /etc/pam_thinkfinger/your-login.bir: Operation not supported", you are safe to ignore it. Or you can add the mount option "acl" to the root filesystem:
/dev/sda1 / ext3 defaults,acl,noatime,errors=remount-ro 0 1
Known problems
*
Biggest problem : gksudo will become "invisible". It means that if you launch any program with gksudo, it will wait forever until your swipe your finger without displaying anything on the screen. For example, if you launch synaptic from the menu, nothing will happen. Swipe your finger and synaptic appears! (This is [WWW] bug #86843 or [WWW] upstream bug #19132)
*
Gnome-keyring doesn't use PAM. So you have to type your password. A [WWW] workaround for gnome-keyring is available, but this doesn't work if you authenticated via fingerprint. Same holds for pam_ssh.
*
Gnome-screensaver doesn't ask for your fingerprint. You have to type your password as usual. This is [WWW] bug #411293. FIXXED: [WWW] http://en.thinkwiki.org/wi...
*
It's not translated. You will see "Password or swipe finger:" in English, not in your locale. You can fix gdm, adding ThinkFinger message to perhaps_translate_message() in daemon/verify-pam.c. Then you need to regenerate POT file and update PO file for your language.
*
Does not seem to work properly with Kubuntu: login session does not work with fingerprints (there's a [WWW] bug report for KDM), "kdesu" applications fail to start, sometimes root launching succeeds without any authentification at all, ... But basic fingerprinting works perfectly for "tf-tool" (create or verify fingerprints).
F.A.Q
*
Can I still use a regular password ?
*
Yes. The "enter your password" will be replaced by "Enter your password or swipe your finger". You can still use your password if you are wearing gloves (just an example)
*
I have a "Could not claim USB device" error
*
You must run tf-tool as root or use "sudo" in front of the command.
*
I still need to type my login. I want to only swipe my finger.
*
Indeed, it would be cool. This is a feature currently not supported by Thinkfinger but it might be available in future releases.
*
0.2.3 or superior doesn't work !
*
Just keep 0.2.2 for now. 0.2.3 requires the uinput module (that can be loaded with a simple sudo modprobe uinput) so it's easier to stick with 0.2.2 until all issues are solved. Alternatively justr add uinput to /etc/modules to make sure it always loads.
To be able to use ThinkFinger 0.3
To be able to use ThinkFinger 0.3 you have to load the kernel module "uinput". To check if it is loaded already:
$ lsmod | grep uinput
Load this module, if it's not loaded:
$ sudo modprobe uinput
or you can add it to the list in "/etc/modules" to make it load automatically at boot time:
$ sudo nano -w /etc/modules
or
$ sudo gedit /etc/modules
Typically it looks like this:
# /etc/modules: kernel modules to load at boot time.
#
# This file contains the names of kernel modules that should be loaded
# at boot time, one per line. Lines beginning with "#" are ignored.
fuse
lp
sbp2
uinput
