This is a simple PAM module which uses the fingerprint processing and

verification from libfprint for authentication instead of asking for
a password.

6 files changed, 83 insertions, 0 deletions

diff --git a/security/pam-fprint/DESCR b/security/pam-fprint/DESCR
new file mode 100644
index 00000000000..cc0811c26ad
--- /dev/null
+++ b/security/pam-fprint/DESCR
@@ -0,0 +1,3 @@
+This is a simple PAM module which uses the fingerprint processing and
+verification from libfprint for authentication instead of asking for
+a password.
diff --git a/security/pam-fprint/MESSAGE b/security/pam-fprint/MESSAGE
new file mode 100644
index 00000000000..e92d4a86fa5
--- /dev/null
+++ b/security/pam-fprint/MESSAGE
@@ -0,0 +1,16 @@
+===========================================================================
+$NetBSD: MESSAGE,v 1.1.1.1 2009/02/26 21:52:00 plunky Exp $
+
+Read `pam_fprint_enroll --help' to learn about enrolling fingers. The
+fingerprint data is stored in the users home directory under the .fprint
+directory, and the program must have read/write access to the USB devices.
+
+After enrolling fingerprints for your user(s), you can enable finger
+print authentication by adding the following line to the corresponding
+PAM configuration file(s) in /etc/pam.d
+
+auth            sufficient      ${PREFIX}/lib/security/pam_fprint.so
+
+Note that using a fingerprint to authenticate is not particularly
+secure, see the pam_fprint web site for more information.
+===========================================================================
diff --git a/security/pam-fprint/Makefile b/security/pam-fprint/Makefile
new file mode 100644
index 00000000000..5204f4ef06e
--- /dev/null
+++ b/security/pam-fprint/Makefile
@@ -0,0 +1,30 @@
+# $NetBSD: Makefile,v 1.1.1.1 2009/02/26 21:52:00 plunky Exp $
+
+DISTNAME=	pam_fprint-0.2
+PKGNAME=	${DISTNAME:S/_/-/}
+CATEGORIES=	security
+MASTER_SITES=	${MASTER_SITE_SOURCEFORGE:=fprint/}
+EXTRACT_SUFX=	.tar.bz2
+
+MAINTAINER=	plunky@rya-online.net
+HOMEPAGE=	http://reactivated.net/fprint/wiki/Pam_fprint
+COMMENT=	PAM module to provide authentication using fingerprint readers
+
+PKG_DESTDIR_SUPPORT=	user-destdir
+
+GNU_CONFIGURE=		yes
+USE_LANGUAGES=		c c++
+USE_TOOLS+=		gmake pkg-config
+
+# Fix (workaround?) a bug with openpam/NetBSD
+# The bug is described in PR security/39313.
+#
+.include "../../mk/bsd.prefs.mk"
+#
+.if ${OPSYS} == "NetBSD"
+CFLAGS+=		-DNO_STATIC_MODULES
+.endif
+
+.include "../../security/libfprint/buildlink3.mk"
+.include "../../mk/pam.buildlink3.mk"
+.include "../../mk/bsd.pkg.mk"
diff --git a/security/pam-fprint/PLIST b/security/pam-fprint/PLIST
new file mode 100644
index 00000000000..79b8fe7661e
--- /dev/null
+++ b/security/pam-fprint/PLIST
@@ -0,0 +1,3 @@
+@comment $NetBSD: PLIST,v 1.1.1.1 2009/02/26 21:52:00 plunky Exp $
+bin/pam_fprint_enroll
+lib/security/pam_fprint.so
diff --git a/security/pam-fprint/distinfo b/security/pam-fprint/distinfo
new file mode 100644
index 00000000000..cfe4c11be02
--- /dev/null
+++ b/security/pam-fprint/distinfo
@@ -0,0 +1,6 @@
+$NetBSD: distinfo,v 1.1.1.1 2009/02/26 21:52:00 plunky Exp $
+
+SHA1 (pam_fprint-0.2.tar.bz2) = d52543cb2b4cb7d1a32ae30347a9053bc118f2cd
+RMD160 (pam_fprint-0.2.tar.bz2) = 483fcf6b70d4805b1da4f95acbd34c672275a4ba
+Size (pam_fprint-0.2.tar.bz2) = 72781 bytes
+SHA1 (patch-aa) = e2d6a4daa9d3e7d0af10807d1d81e74941b79089
diff --git a/security/pam-fprint/patches/patch-aa b/security/pam-fprint/patches/patch-aa
new file mode 100644
index 00000000000..abb6b7d006b
--- /dev/null
+++ b/security/pam-fprint/patches/patch-aa
@@ -0,0 +1,25 @@
+$NetBSD: patch-aa,v 1.1.1.1 2009/02/26 21:52:00 plunky Exp $
+
+- pamtest relies on libpam_misc so disable it
+- pam modules directory is hardcoded, fix that
+
+--- src/Makefile.in.orig	2007-11-19 19:15:11.000000000 +0000
++++ src/Makefile.in
+@@ -30,7 +30,7 @@ POST_INSTALL = :
+ NORMAL_UNINSTALL = :
+ PRE_UNINSTALL = :
+ POST_UNINSTALL = :
+-noinst_PROGRAMS = pamtest$(EXEEXT)
++noinst_PROGRAMS = 
+ bin_PROGRAMS = pam_fprint_enroll$(EXEEXT)
+ pammod_PROGRAMS = pam_fprint.so$(EXEEXT)
+ subdir = src
+@@ -163,7 +163,7 @@ sysconfdir = @sysconfdir@
+ target_alias = @target_alias@
+ top_builddir = @top_builddir@
+ top_srcdir = @top_srcdir@
+-pammoddir = /lib/security
++pammoddir = @libdir@/security
+ pam_fprint_so_SOURCES = pam_fprint.c
+ pam_fprint_so_CFLAGS = -fPIC $(FPRINT_CFLAGS)
+ pam_fprint_so_LDFLAGS = -shared