ecryptfs team mailing list archive

[Dustin Kirkland <dustin.kirkland@xxxxxxxxx>]

Hmm, okay, I'm unfamiliar with pam_ssh.

Please help me understand...

What are you trying to accomplish with this pam-ssh package?

Your home (or private) directory is encrypted with a mount passphrase.
This mount passphrase is symmetrically encrypted (wrapped) with your
system login passphrase.

In order to automatically mount your home (or private) directory, you
must enter your system login passphrase, such that pam_ecryptfs can
unwrap ~/.ecryptfs/wrapped-passphrase, obtain your mount passphrase, add
that to your kernel keyring, and then perform the mount.

It's possible that this pam-ssh feature is incompatible with encrypted-
home/encrypted-private.  If so, we should document this as such.

Can you please provide more information?

:-Dustin

** Changed in: ecryptfs
   Importance: Undecided => Low

** Changed in: ecryptfs
       Status: New => Incomplete

** Package changed: ubuntu => ecryptfs-utils (Ubuntu)

** Changed in: ecryptfs-utils (Ubuntu)
   Importance: Undecided => Medium

** Changed in: ecryptfs-utils (Ubuntu)
       Status: New => Incomplete

-- 
Auto mount of encrypted home directory RANDOMLY stops to work
https://bugs.launchpad.net/bugs/364015
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in eCryptfs - Enterprise Cryptographic Filesystem: Incomplete
Status in “ecryptfs-utils” source package in Ubuntu: Incomplete

Bug description:
I had a problem with ssh public key auth and encrypted home directory in Jaunty. I fixed the issue by workaround provided by Dustin Kirkland:

https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/362427

But after reboot auto mount of encrypted home directory has stopped to work. There is only one error string in auth.log:

Mount of private directory return code [256]

At the same time I am able to mount home directory manually through ecryptfs-mount-private command. But  /sbin/mount.ecryptfs_private shows me the following:

keyctl_search: Required key not available
Perhaps try the interactive 'ecryptfs-mount-private'

... looks like pam_ecryptfs is not able to read  ~/.ecryptfs/wrapped-passphrase