27.3 Managing Fingerprints with tf-tool

Registering a Fingerprint

  1. Open a shell and log in as root.

  2. To register a fingerprint for a certain user, enter

    tf-tool --add-user login

    tf-tool prompts the user to swipe his finger until three readable fingerprints have been gathered.

  3. If you also want to use fingerprint authentication for starting YaST or YaST modules, you need to register a fingerprint for root, too.

As soon as the user's fingerprint has been successfully registered, the user can choose to authenticate with either fingerprint or password for the actions and applications listed in Section 27.1, Supported Applications and Actions.

Verifying or Removing a Fingerprint

  1. Open a shell and log in as root.

  2. To verify an existing fingerprint for a certain user, run the following command:

    tf-tool --verify-user login
  3. Let the user swipe his finger. tf-tool compares the fingerprint to the print stored for this user and provides a message if the fingerprints match.

  4. To remove a user's fingerprint, delete the appropriate fingerprint file for this user with the following command:

    shred /etc/pam_thinkfinger/login.bir

With tf-tool --acquire you can do a test run with tf-tool. The fingerprint is stored as /tmp/test.bir and can be verified with tf-tool --verify.