T43, Fingerprint Scanner, pam, xscreensaver, gdm

[doppelfish]

So, since my T43 has the fingerprint scanner, I figured I'd put it to work. For GDM, I set up the following /etc/pam.d/gdm:

Code: Select all

#
# $FreeBSD: src/etc/pam.d/gdm,v 1.7 2003/04/30 21:57:54 markm Exp $
#
# PAM configuration for the "gdm" service
#

# auth
auth            required        pam_nologin.so          no_warn
auth            sufficient      /usr/local/lib/pam_bsdbioapi.so {2345674b-4554-464d-2f45-234320325250} /var/db/bioapi/registry/HKEY_LOCAL_MACHINE/Software/BioAPI/DL
auth            required        pam_unix.so             no_warn try_first_pass

# account
account         required        pam_unix.so

# session
session         required        pam_permit.so

However, gdm always asks me to scan my finger twice, and sometimes (depending on the moon phase or something), it asks for the password, too. Funky.

I have also set up /etc/pam.d/xscreensaver as follows:

Code: Select all

auth            sufficient      /usr/local/lib/pam_bsdbioapi.so {2345674b-4554-464d-2f45-234320325250} /var/db/bioapi/registry/HKEY_LOCAL_MACHINE/Software/BioAPI/DL
auth            required        pam_unix.so             no_warn

but xscreensaver, recompiled with pam support, happily ignores that.

Pointers? Hints? Speculations? Rants?

Or maybe just a cookie?

cheers,
-- fish