Configuring pam.d files

Support Software & Applications
6

I don’t know Gnome, but some things are universal, simply add these two lines on top of any pam file wihich you want use:

auth		sufficient  	pam_unix.so try_first_pass likeauth nullok
auth		sufficient  	pam_fprintd.so

On my example (I don’t use fingerprint reader, but Yubikey, and KDE instead of Gnome):

  • added lines to /etc/pam.d/sudo to use with sudo command
  • added lines to /etc/pam.d/polkit-1 to use with any polkit autenthication (eg. auth from Pamac GUI)
  • added lines to /etc/pam.d/kde to work with lock screen (and potentially with other KDE apps) – you probably won’t be able to do this because Gnome uses same pam to login and lock screen
  • do not touch /etc/pam.d/sddm because I want to unlock keyring on login so I need password login – you also shouldn’t touch /etc/pam.d/gdm-password (but if you want to enable fingerprint login you should just backup this file and rename /etc/pam.d/gdm-fingerprint to gdm-password)
2 Likes