[face recognition] How to setup PAM for GDM, gnome?

https://en.opensuse.org/SDB:Facial_authentication

Following these steps, I’ve tried to setup face unlock but I’m stuck on how to tell PAM to use face authentication. it tells you about sddm but not gdm

  • /etc/pam.d/sddm - configuration of login into graphical user interface through SDDM (the login screen after system start up but before desktop environment launch)
  • /etc/pam.d/login - configuration of login into terminal mode
  • /usr/etc/pam.d/kde - configuration of screen unlock for KDE (or /etc/pam.d/kscreenlocker for Tumbleweed version older than January, 2020)

I’m using gnome and there isn’t any gdm or login in pam.d

On the default gdm screen, the camera doesn’t open and face unlock doesn’t work. I have to put password to login.

I have setup howdy with sudo howdy add

sudo howdy list

Known face models for evirac:
ID Date Label
0 2023-10-17 10:42:01 f1
1 2023-10-17 10:43:00 f2
2 2023-10-17 10:43:30 f3

They are most likely in /usr/lib/pam.d, and you can copy them in /etc/pam.d and edit.

Always provide full path to any file to avoid any ambiguity and misunderstanding.

1 Like

And please do not separate the command from the output. Copy/paste the line with the prompt/command, all output and the next prompt in one sweep into your post. And please use the Preformated text button </> and not the Blockquote button " around such computer text.

Thus not:

uname -r

5.14.21-150400.24.88-default

but:

henk@boven:~> uname -r
5.14.21-150400.24.88-default
henk@boven:~> 
1 Like

I did just that but still face unlock doesn’t activate on lock screen

Then please SHOW that. Nobody can check if there are errors there when they do not see what is there. You need help based on facts, not on guessing do you?

What should I show?
I copied /usr/lib/pam.d/gdm to /etc/pam.d and then added

auth sufficient pam_python.so /usr/lib64/security/howdy/pam.py

to the first line

After that I rebooted and on gdm I entered password to log in (as face recognition did not activate)

I became curious and tried to find some videos showing how it works. It does not look like there is any visual feedback at all, so the obvious question - how do you know it did not activate vs. it did activate but failed to verify your image?

Probably testing it with something like sudo while enabling as much output as possible in configuration file could give more information. At least you can see output on your terminal.

And again, a hint on how to use the forums:
Please use the Preformatted text </> and not the Blockquote " for computer text!

I know because led next to my camera did not light up. Every time camera activates on my laptop, it lights up