Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I recently bought a Lenovo Thinkpad Edge E420s, which comes with a fingerprint reader. I have installed the fingerprint-gui and libbsapi to get it fully working (make: UPEK).

Is there a way to unlock the keyring on login using the fingerprint reader?

Apparently you can get it working by setting a blank password when using Thinkfinger, but that's not an option for me.

Running lsusb in the terminal returns Bus 001 Device 003: ID 147e:1002 Upek

share|improve this question
    
Could you post the make of your fingerprint reader or at least the usb id? –  K. Hendrik May 15 '11 at 15:59
    
Check out my second sentence :) I'm pretty sure it's an UPEK. –  JLinden May 15 '11 at 16:23
    
Yes that's the brand but there is more than one upek fingerprint reader usbid would be very helpful. –  K. Hendrik May 15 '11 at 16:44
    
I've updated my question with the usbid of the fingerprint reader. –  JLinden May 15 '11 at 17:22

4 Answers 4

this is currently a bug with GNOME-Keyring it was listed as invaild during the previous year but they recently opened back up for 11.04 and are working on it as of May 7th 2011 hope this helps

https://bugs.launchpad.net/gnome-keyring/+bug/276384

share|improve this answer
    
Triaged doesn't mean that anyone is working on it. blog.launchpad.net/general/of-bugs-and-statuses –  htorque May 22 '11 at 9:29
    
sorry my bad, but they did open the issue back up –  Frosty May 22 '11 at 10:45

You might wanna try to get fprint working though I'm not sure it will work because it's not on the list of supported devices however it is not on the list of unsupported devices either.

There are packages for upek in general included, so it might just work.

Here are some instructions on how to set it up: http://ubuntuforums.org/showthread.php?t=760018

share|improve this answer
    
It seems like my reader is not supported, "No devices detected." is returned when I try to set it up. –  JLinden May 16 '11 at 9:48
    
Hmm ok it was worth a try. –  K. Hendrik May 16 '11 at 14:33

The whole pourpose of the keyring is to store your passwords and data on your storage device. To do that securely, they must be encrypted with something you know (your password). To unlock the keyring, you must provide the password so that gnome-keyring can decrypt the stored passwords. Your fingerprint can not be used as a password because it is not always the same. Fingerprint readers apply some fuzzy logic to tell if the stored fingerprint matches the read fingerprint and tell yes or no. That's why it can be used for authentication, but not for decryption of stored passwords (unless you have a blank password or would accept storing your master password unencrypted) The only way it could work is if the fingerprint device could store your master password on a chip in plaintext that could only be read if the fingerprint matches. And that's assuming that reading the internal memory/registers of a chip is much much harder than reading your local storage. I really don't know how it is done under windows, and I hope it is not security through obscurity. But if they're not using hardware to do this, they're simply using some obscure (but insecure) method to store your passwords.

share|improve this answer
    
Can't anything be connected to the pam.d pipe to unlock keyrings on login? –  Cyprian Guerra Mar 13 at 15:57

According to this post from Ubuntu Forums, there is no way to do this.

share|improve this answer
    
i don't know if their are work around. –  dsaint May 15 '11 at 13:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.