fprint (finger print sensor framework) port ready for testing

Hi,

I did a port [2] of the fprint finger print sensor framework
[1]
and would like to receive some feedback before I commit it.

It comes with a PAM module for finger print based
authentication, a
graphical (fprint_demo) and a console (pam_fprint_enroll)
application
for finger print enrollment.

I did my tests with the UPEK sensor found in Lenovo's T61.

Simon

(M'fup2 ports)

[1] http
://www.reactivated.net/fprint/wiki/Main_Page
[2] htt
p://home.leo.org/~barner/freebsd/fprint.tar.gz

-- 
Best regards / Viele Grüße,                            
barnerFreeBSD.org
 Simon Barner                                               
barnergmx.de

On Monday 14 April 2008, Simon Barner wrote:
> Hi,
>
> I did a port [2] of the fprint finger print sensor
framework [1]
> and would like to receive some feedback before I commit
it.
>
> It comes with a PAM module for finger print based
authentication, a
> graphical (fprint_demo) and a console
(pam_fprint_enroll) application
> for finger print enrollment.
>
> I did my tests with the UPEK sensor found in Lenovo's
T61.
>
> Simon
>
> (M'fup2 ports)
>
> [1] http
://www.reactivated.net/fprint/wiki/Main_Page
> [2] htt
p://home.leo.org/~barner/freebsd/fprint.tar.gz
Just tested fprint_demo on my Fujitsu P8010 and it works!

Thanks for porting it.

-- 
Anish Mistry

On Mon, 2008-04-14 at 20:07 +0200, Simon Barner wrote:
> Hi,
> 
> I did a port [2] of the fprint finger print sensor
framework [1]
> and would like to receive some feedback before I commit
it.
> 
> It comes with a PAM module for finger print based
authentication, a
> graphical (fprint_demo) and a console
(pam_fprint_enroll) application
> for finger print enrollment.
> 
> I did my tests with the UPEK sensor found in Lenovo's
T61.
> 
> Simon
> 
> (M'fup2 ports)
> 
> [1] http
://www.reactivated.net/fprint/wiki/Main_Page
> [2] htt
p://home.leo.org/~barner/freebsd/fprint.tar.gz
> 

This is fantastic! People have always been asking me 'so
does the
fingerprint sensor work?' when they find out I run FreeBSD
on my laptop
- and now I can tell them it does! Just tested with
fprint_demo, but
successfully enrolled and verified my fingerprints no
problem, using an
HP nc6320 and the aes2501 sensor.

Cheers

Tom

On Apr 14, 2008, at 8:07 PM, Simon Barner wrote:

> I did a port [2] of the fprint finger print sensor
framework [1]
> and would like to receive some feedback before I commit
it.
>
> It comes with a PAM module for finger print based
authentication, a
> graphical (fprint_demo) and a console
(pam_fprint_enroll) application
> for finger print enrollment.
>
> I did my tests with the UPEK sensor found in Lenovo's
T61.

Well done ! Works with the VAIO fps just fine.

Dw
_______________________________________________
freebsd-mobilefreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-mobile

To unsubscribe, send any mail to
"freebsd-mobile-unsubscribefreebsd.org"

On Mon, 2008-04-14 at 20:07 +0200, Simon Barner wrote:
> Hi,
> 
> I did a port [2] of the fprint finger print sensor
framework [1]
> and would like to receive some feedback before I commit
it.
> 
> It comes with a PAM module for finger print based
authentication, a
> graphical (fprint_demo) and a console
(pam_fprint_enroll) application
> for finger print enrollment.
> 
> I did my tests with the UPEK sensor found in Lenovo's
T61.

Cool, it works for me, even pam module.

As I understand, pam module requires user name first.
So there no way to make gdm/kdm/*dm just scan image, find
apropriate
user and login him ?

Have you seen/reviewed security/bioapi and
security/bsp_upektfmess
(later works only on RELENG_6 now) ?

Looks like fprint ports are introduce one new bioapi ?

> Simon
> 
> (M'fup2 ports)
> 
> [1] http
://www.reactivated.net/fprint/wiki/Main_Page
> [2] htt
p://home.leo.org/~barner/freebsd/fprint.tar.gz
> 
-- 
Vladimir B. Grebenschikov
vovafbsd.ru
_______________________________________________
freebsd-mobilefreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-mobile

To unsubscribe, send any mail to
"freebsd-mobile-unsubscribefreebsd.org"

On Mon, 14 Apr 2008 20:07:40 +0200
Simon Barner <barnerFreeBSD.org> wrote:

> Hi,
> 
> I did a port [2] of the fprint finger print sensor
framework [1]
> and would like to receive some feedback before I commit
it.
> 
> It comes with a PAM module for finger print based
authentication, a
> graphical (fprint_demo) and a console
(pam_fprint_enroll) application
> for finger print enrollment.
> 
> I did my tests with the UPEK sensor found in Lenovo's
T61.
> 
> Simon
> 
> (M'fup2 ports)
> 
> [1] http
://www.reactivated.net/fprint/wiki/Main_Page
> [2] htt
p://home.leo.org/~barner/freebsd/fprint.tar.gz
> 

Hi Simon,
I installed both packages. Used wheel instead of operators
for devfs (I am member of wheel). running as root made it
work great 

I have a Lenovo Thinkpad z60m, upekts driver. The details :

FreeBSD ayiin.octantis.com.au 7.0-STABLE FreeBSD 7.0-STABLE
#43: Mon Apr 14 11:50:52 EST 2008     rootayiin.octantis.com.au:/usr/obj/usr/src/sys/AYIIN 
i386

$ sudo usbdevs  -v -d
[...]
Controller /dev/usb2:
addr 1: full speed, self powered, config 1, UHCI root
hub(0x0000), Intel(0x0000), rev 1.00
  uhub2
 port 1 powered
 port 2 addr 2: full speed, power 100 mA, config 1,
Biometric Coprocessor(0x2016), STMicroelectronics(0x0483),
rev 0.01
   ugen0
[...]


dmesg shows  :
Apr 14 22:17:08 ayiin kernel: ugen0: <STMicroelectronics
Biometric Coprocessor, class 0/0, rev 1.00/0.01, addr 2>
on uhub2


Best regards,
B


_________________________
{Beto|Norberto|Numard} Meijome

"A dream you dream together is reality."
  John Lennon

I speak for myself, not my employer. Contents may be hot.
Slippery when wet. Reading disclaimers makes you go blind.
Writing them is worse. You have been Warned.
_______________________________________________
freebsd-mobilefreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-mobile

To unsubscribe, send any mail to
"freebsd-mobile-unsubscribefreebsd.org"

pam_fprint works (see below) but when i try to run the
fprint demo i get

STATUS: No Devices Found

pam_fprint_enroll -f 7
This program will enroll your finger, unconditionally
overwriting any
selected print that was enrolled previously. If you want to
continue, press
enter, otherwise hit Ctrl+C

Found device claimed by UPEK TouchStrip driver
Opened device. It's now time to enroll your finger.

You will need to successfully scan your Right Index Finger 3
times to
complete the process.

Scan your finger now.
upekts:error [read_msg] non-zero bytes in cmd response
upekts:error [read_msg28] expected response, got -1 seq=40
Enroll stage passed. Yay!

Scan your finger now.
Enroll stage passed. Yay!

Scan your finger now.
Enroll complete!
Enrollment completed!
_______________________________________________
freebsd-mobilefreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-mobile

To unsubscribe, send any mail to
"freebsd-mobile-unsubscribefreebsd.org"

Vladimir Grebenschikov wrote:
> As I understand, pam module requires user name first.
> So there no way to make gdm/kdm/*dm just scan image,
find apropriate
> user and login him ?

As far as I can tell, it currently is not supported, but
somebody seems
to work on it:

http://www.mail-ar
chive.com/fprintreactivated.net/msg00471.html
> 
> ???Have you seen/reviewed security/bioapi and
security/bsp_upektfmess
> (later works only on RELENG_6 now) ?

Yes. In the mean time, there even is a binary of the UPEK
driver for
FreeBSD 7 i386, but the pam module did not work for me.
> 
> Looks like fprint ports are introduce one new bioapi ?

Yes, but at it seems, the developers deliberated well about
it:

http://www.reactivated.net/fprint/wiki/FAQ#Why_no_Bio
API.3F

-- 
Best regards / Viele Grüße,                            
barnerFreeBSD.org
 Simon Barner                                               
barnergmx.de

Outback Dingo wrote:
> pam_fprint works (see below) but when i try to run the
fprint demo i get
> 
> STATUS: No Devices Found

Are you sure you have r/w access to the sensor's USB
device?
> 
> pam_fprint_enroll -f 7
> This program will enroll your finger, unconditionally
overwriting any selected
> print that was enrolled previously. If you want to
continue, press enter,
> otherwise hit Ctrl+C
> 
> Found device claimed by UPEK TouchStrip driver
> Opened device. It's now time to enroll your finger.
> 
> You will need to successfully scan your Right Index
Finger 3 times to complete
> the process.
> 
> Scan your finger now.
> upekts:error [read_msg] non-zero bytes in cmd response
> upekts:error [read_msg28] expected response, got -1
seq=40

Something seems to go wrong. I have never seenn this error
message.

Which sensor are you using? Can you send me the output of
`usbdevs -vd'
in a private mail please?

-- 
Best regards / Viele Grüße,                            
barnerFreeBSD.org
 Simon Barner                                               
barnergmx.de

Fredrik Lindberg wrote:
> Simon Barner wrote:
>> Vladimir Grebenschikov wrote:
>>> ???Have you seen/reviewed security/bioapi and
security/bsp_upektfmess
>>> (later works only on RELENG_6 now) ?
>> Yes. In the mean time, there even is a binary of
the UPEK driver for
>> FreeBSD 7 i386, but the pam module did not work for
me.
> 
> A new binary has been re-rolled which takes care of the
Undefined
> symbol errors in the first one.  It works with PAM as
well.
> The updated port can be found in ports/122768

Ok, good to know, I'll take care of your PR.
> 
> However, if fprint suites your needs I would recommend
using it instead.
> Another possibility would be to create BioAPI modules
based on the
> reversed engineered code from fprint.

The latter option might be interesting. However, the fprint
developers
plan more advanced authentication (and also identification)
in the future
(see link in my mail to Vladimir Grebenschikov earlier in
this thread).

-- 
Best regards / Viele Grüße,                            
barnerFreeBSD.org
 Simon Barner                                               
barnergmx.de