← Back to team overview

ecryptfs team mailing list archive

[Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

 

Hi Dustin,

Thanks a lot for explanation. Unfortunately such kind of home directory
encryption doesn't suit my needs. So, I have encrypted home directory
and I able to mount it only with login passphrase our mount it manually
in case of public key auth. In the last case I have to mount directory
every time after ssh login.

Is there any way to mount encrypted home directory manually only once(on
server restart)?

-- 
Support a wrapped-passphrase.ssh, wrapped with an ssh private key
https://bugs.launchpad.net/bugs/364015
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in eCryptfs - Enterprise Cryptographic Filesystem: Confirmed
Status in “ecryptfs-utils” source package in Ubuntu: Confirmed

Bug description:
I had a problem with ssh public key auth and encrypted home directory in Jaunty. I fixed the issue by workaround provided by Dustin Kirkland:

https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/362427

But after reboot auto mount of encrypted home directory has stopped to work. There is only one error string in auth.log:

Mount of private directory return code [256]

At the same time I am able to mount home directory manually through ecryptfs-mount-private command. But  /sbin/mount.ecryptfs_private shows me the following:

keyctl_search: Required key not available
Perhaps try the interactive 'ecryptfs-mount-private'

... looks like pam_ecryptfs is not able to read  ~/.ecryptfs/wrapped-passphrase



Follow ups