Upek Biometric Touchchip/Touchstrip Fingerprint Support on Ubuntu 10.04

This Fingerprint sensor is usual to see nowadays. I have on of these in my Thinkpad SL400 (yeah, Lenovo doesn't uses thinkfinger anymore). Let's play

1. Install this packages
   $ sudo apt-get install libfakekey0 libfprint0 libqca2 libqca2-plugin-ossl libqca2-plugin-gnupg
   
2. Add uinput at /etc/modules
   $ echo uinput >> /etc/modules
   
3. Download finguerprint-gui binary for your platforme here and install using regular parameters (and Yes to install the 3rd party driver). If you have any doubt, just consult the pdf provided with package called install-step-by-step (also, this Howto are based on it).
4. See your device in lsusb and set permissions in device /dev/bus/usb/xxx/yyy where "xxx" is BUS and "yyy" Device numbers. In my example:
   $ lsusb | grep -i Upek
   Bus 005 Device 003: ID 147e:1000 Upek Biometric Touchchip/Touchstrip Fingerprint Sensor
   $ sudo chmod 777 /dev/bus/usb/005/003
5. Create a directory /var/upek and chmod 777 on him
   $ sudo mkdir /var/upek
   $ sudo chmod 777 /var/upek -R
   
6. Put yourself in plugdev group
   $ sudo usermod -a -G plugdev $USER
   
7. Create a file named /etc/upek.cfg with this contents: nvm-prefix="/var/upek/.NVM"
   dualswipe=0
8. Reboot
9. Start fingerprint-gui and select your device on the list (If you get some error at this point, just look at /var/log/auth.log)
   
   
10. Select what finger you will scan
    
    
11. Scan your finger
12. Ok, at this point, you have some fingerprints in /var/lib/fingerprint-gui/$USER/libbsapi
13. Set a root password and at least one fingerprint to user root.
14. Make a copy of /etc/pam.d/common-auth to /etc/pam.d/common-auth.fingerprint
    $ sudo cp /etc/pam.d/common-auth /etc/pam.d/common-auth.fingerprint
15. Edit /etc/pam.d/common-auth.fingerprint and put this code on the top of file:
    auth sufficient pam_fingerprint-gui.so debug
16. Now we need make pam know that we can use fingerprints to login. First, open an extra terminal if something goes wrong. Now, let's make su, sudo, gdm and login authenticate. Change in every file below the line @include common-auth to @include common-auth.fingerprint. (For GDM, make sure you don't have auto-login). Oh, also.. if you use kdm, you can edit /etc/pam.d/kdm.
    /etc/pam.d/su /etc/pam.d/login
    /etc/pam.d/sudo
    /etc/pam.d/gdm
17. For gnome-screensaver, open gconf-editor and put "/usr/local/bin/fingerprint-plugin -d" in /apps/gnome-screensaver/embedded_keyboard_command.
18. Edit /etc/pam.d/gnome-screensaver and do the same procedure from 16.

Ok, now you're able to use fingerprints to login into your system.


This module can also provide an option to save your passwords using a pendrive, so you'll only be able to login into the system if you have the pendrive with certs and, of course, your fingers.