FS#65658 - [fprintd] Version 1.90 doesn't work with polkit authenication dialogs

Attached to Project: Arch Linux
Opened by Neal (meltdown) - Saturday, 29 February 2020, 00:03 GMT
Last edited by freswa (frederik) - Sunday, 08 March 2020, 17:03 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Jan Alexander Steffens (heftig)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

After updating fprintd and libfprint to 1.90, system authentication dialogs using polkit no longer allow me to use my fingerprint, only password is available.
Following the ArchWiki entry under fprintd and appending /etc/pam.d/polkit-1 file with this:

auth sufficient pam_fprintd.so

This allowed settings options, pamac, print setting unlock, etc. to use fingerprint authentication.

Using latest Kernel, latest Gnome, all Arch packages up-to-date.

I downgraded fprintd and libfprint and it works again immediately.

Let me know if there is anything I can test.

Lenovo T440
lsusb: Bus 001 Device 002: ID 138a:0017 Validity Sensors, Inc. VFS 5011 fingerprint sensor

Thank you,
Neal
This task depends upon

Closed by  freswa (frederik)
Sunday, 08 March 2020, 17:03 GMT
Reason for closing:  Fixed
Additional comments about closing:  Reporter: The new version is working, The upgrade deleted my root fingerprints and I just had to re-enroll them. After doing that, all works as expected.
Comment by Neal (meltdown) - Saturday, 29 February 2020, 13:22 GMT
Here is a screenshot of it working with it downgraded, then one after upgrading
   Screenshot from 2020-02-29 07... (309.4 KiB)
   Screenshot from 2020-02-29 07... (132.3 KiB)
Comment by Neal (meltdown) - Sunday, 01 March 2020, 19:03 GMT
I found a solution. I rebuilt fprintd with debugging enabled and found the error:

Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): prints registered: no
Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): ListEnrolledFingers failed for root: Failed to discover prints
Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): Using device /net/reactivated/Fprint/Device/0 (out of 1 devices)
Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): prints registered: no
Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): ListEnrolledFingers failed for root: Failed to discover prints
Mar 01 12:59:16 T440 polkit-agent-helper-1[166873]: pam_fprintd(polkit-1:auth): Using device /net/reactivated/Fprint/Device/0 (out of 1 devices)

I ran `sudo fprintd-enroll` to add some root fingerprints. Now it works again.
Note: After upgrading fprintd and libfprint to 1.90 before filing this ticket, I had to re-enroll my user fingerprints. I forgot that I also enrolled them for "root" long ago (over a year ago). The saved prints must have gotten erased due to the upgrade. I think this ticket can be closed, but maybe the Wiki should mention this, or on the Latest News section of archlinux.org

Loading...