diff --git a/roles/thinkpad/templates/pam.d/sudo.j2 b/roles/thinkpad/templates/pam.d/sudo.j2
index f5b1198..2f3ef27 100644
--- a/roles/thinkpad/templates/pam.d/sudo.j2
+++ b/roles/thinkpad/templates/pam.d/sudo.j2
@@ -1,5 +1,6 @@
 {% if fingerprint == True %}
-auth            sufficient      pam_fprintd.so
+auth		sufficient  	pam_unix.so try_first_pass likeauth nullok
+auth		sufficient  	pam_fprintd.so
 {% endif %}
 auth            include         system-auth
 account         include         system-auth