ecryptfs team mailing list archive

[Dustin Kirkland <dustin.kirkland@xxxxxxxxx>]

** Changed in: ecryptfs
   Importance: Undecided => Medium

** Changed in: ecryptfs-utils (Ubuntu)
   Importance: Undecided => Medium

-- 
ecryptfs-utils does not work with LDAP/Kerberos users
https://bugs.launchpad.net/bugs/293433
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in eCryptfs - Enterprise Cryptographic Filesystem: Fix Committed
Status in “ecryptfs-utils” source package in Ubuntu: Triaged

Bug description:
Ubuntu version: Intrepid 8.10
eCrypt-utils version: 53-1ubuntu12
slapd version: 2.4.11-0ubuntu6
krb5-* version: 1.6.dfsg.4~beta1-3

All my users use OpenLDAP and MIT Kerberos5 to login, pam.d common-* and ldap.conf files are correctly configured, e.g. ldapwhoami reports:

testuser@dj-dvant-server:~$ ldapwhoami 
SASL/GSSAPI authentication started
SASL username: testuser@xxxxxxxxx
SASL SSF: 56
SASL data security layer installed.
dn:uid=testuser,ou=people,dc=xxxxx,dc=com

klist reports:
Default principal: testuser@xxxxxxxxx

Valid starting     Expires            Service principal
11/04/08 14:21:28  11/05/08 14:21:28  krbtgt/XXXXX.COM@xxxxxxxxx
11/04/08 14:27:42  11/05/08 14:21:28  ldap/dj-dvant-server.xxxxx.com@xxxxxxxxx

When using the tools from the ecryptfs-utils package such as:
ecryptfs-setup-private  I get the following error:
ERROR: User [xxx] does not exist

e.g:

testuser@dj-dvant-server:~$ ecryptfs-setup-private
ERROR: User [testuser] does not exist

This user only appears in LDAP and SASLAUTHD with Kerberos providing password auth.

This becomes an issue when using dovecot-auth, e.g:

Nov  4 14:30:10 dj-dvant-server dovecot-auth: pam_ldap: error trying to bind as user "uid=testuser,ou=people,dc=xxxxx,dc=com" (Invalid credentials)
Nov  4 14:30:10 dj-dvant-server dovecot-auth: pam_sm_authenticate: Called 
Nov  4 14:30:10 dj-dvant-server dovecot-auth: pam_sm_authenticate: username = [testuser] 
Nov  4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to parse .ecryptfsrc file; rc = [-5]
Nov  4 14:30:10 dj-dvant-server dovecot-auth: Unable to read salt value from user's .ecryptfsrc file; using default 
Nov  4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to open [/home/testuser/.ecryptfs/wrapped-passphrase] for reading 
Nov  4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to unwrap passphrase from file [/home/testuser/.ecryptfs/wrapped-passphrase]; rc = [-5] 
Nov  4 14:30:10 dj-dvant-server dovecot-auth: Error adding passphrase key token to user session keyring; rc = [-5]