← Back to team overview

ecryptfs team mailing list archive

[Bug 305882] Re: ecryptfs private wrapped passphrase with wrong password during password change

 

<slangasek> 16:32:27> +kirkland: could you provide a transcript of a
session showing bug #305882?

Hmm, Steve, per your request, I tried to reproduce this on an Intrepid
(and a Jaunty) system, and actually, I'm not able to reproduce it...

foo2@intrepid:~$ passwd
Changing password for foo2.
(current) UNIX password: foobar
Enter new UNIX password: yes
Retype new UNIX password: yes
You must choose a longer password
Enter new UNIX password: foobar123
Retype new UNIX password: foobar123
passwd: password updated successfully
foo2@intrepid:~$ ecryptfs-unwrap-passphrase ~/.ecryptfs/wrapped-passphrase
asdfasdfasdf

jpritikin73-

Could you please provide a similar log to the one I did above?  Please
scrub it clean of any real passwords!

:-Dustin



** Changed in: ecryptfs-utils (Ubuntu)
       Status: Confirmed => Incomplete

-- 
ecryptfs private wrapped passphrase with wrong password during password change
https://bugs.launchpad.net/bugs/305882
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: Incomplete
Status in “pam” source package in Ubuntu: New

Bug description:
Binary package hint: ecryptfs-utils

To reproduce:

1. On command line, attempt to change your password to a weak password (like "yes").
2. Actually change your password to a strong password.

I found that ecryptfs wrapped the passphrase in the weak password instead of the final password I chose.

Description:	Ubuntu 8.10
Release:	8.10

ecryptfs-utils:
  Installed: 53-1ubuntu12
  Candidate: 53-1ubuntu12
  Version table:
 *** 53-1ubuntu12 0
        500 http://mirrors.us.kernel.org intrepid-updates/main Packages
        100 /var/lib/dpkg/status
     53-1ubuntu11 0
        500 http://mirrors.us.kernel.org intrepid/main Packages



References