http://bugzilla.novell.com/show_bug.cgi?id=555136 User jengelh@medozas.de added comment http://bugzilla.novell.com/show_bug.cgi?id=555136#c1 Jan Engelhardt changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jengelh@medozas.de --- Comment #1 from Jan Engelhardt 2009-11-13 03:42:42 MST --- cryptsetup being stupid: http://bugs.debian.org/541805 Fixed, but not in openSUSE yet because it is very recent. sudo being stupid: http://bugs.debian.org/492333 Supposedly fixed and included in openSUSE 11.2, but the last comment mentions 1.7.2 is still affected. Dunno. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136 User mc@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=555136#c3 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dutchkind@txoriaskea.org --- Comment #3 from Michael Calmer 2009-11-13 04:06:07 MST --- *** Bug 544154 has been marked as a duplicate of this bug. *** http://bugzilla.novell.com/show_bug.cgi?id=544154 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136 User swamp@suse.com added comment http://bugzilla.novell.com/show_bug.cgi?id=555136#c4 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:28804 --- Comment #4 from Swamp Workflow Management 2009-11-13 16:28:31 MST --- The SWAMPID for this issue is 28804. Please submit the patch and patchinfo file using this ID. (https://swamp.suse.de/webswamp/wf/28804) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136 User jengelh@medozas.de added comment http://bugzilla.novell.com/show_bug.cgi?id=555136#c5 Jan Engelhardt changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|cryptsetup prints "command |cryptsetup prints "command |successful" message to |successful" message to |stderr breaking pam_mount |stderr; sudo segfaults |and possibly sudo | --- Comment #5 from Jan Engelhardt 2009-11-13 16:37:23 MST --- The sudo segfault and the cryptsetup chattyness are not related to another. The extra cryptsetup message does not break pam_mount, but it *does* trip up even more stupid programs like gksu — this is documented in pam_mount's bugs.txt BTW. gksu for example thinks that any message on stderr indicates a fatal condition... bad bad gksu — only $? (or equivalent) authoritatively indicates fatality. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

From a cryptsetup perspective that's perfectly alright. From a pam_mount

http://bugzilla.novell.com/show_bug.cgi?id=555136#c7 --- Comment #7 from Stefan Tittel 2009-11-17 16:25:51 UTC --- Thanks Ludwig, your packages work fine and fix the "command successful" message to stderr. Any chance we can get it to the update repo? Unfortunately (as Jan already pointed out) this bug is not related to the sudo problem. And indeed, sudo still segfaults. Another little thing I noticed: If a LUKS volume is already mounted and if a second login happens for the same account, pam_mount will say something like: pam_mount(mount.c:67): Errors from underlying mount program: pam_mount(mount.c:71): Command failed: Device _dev_sda8 already exists. pam_mount(pam_mount.c:543): mount of /dev/disk/by-id ata-SAMSUNG_HD501LJ_S0MUJ13P727486-part8 failed perspective it would be much nicer if pam_mount could first check if the volume is already decrypted/mounted before invoking cryptsetup to do it again. At the moment an error will be thrown, even though the system is in a state which the user would not consider to be erroneous (the volume after all is decrypted/mouted). Or did I overlook some option in the man page of pam_mount.conf? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136#c9 --- Comment #9 from Jan Engelhardt 2009-11-17 17:33:15 UTC --- (In reply to comment #7)

pam_mount(mount.c:67): Errors from underlying mount program: pam_mount(mount.c:71): Command failed: Device _dev_sda8 already exists. pam_mount(pam_mount.c:543): mount of /dev/disk/by-id ata-SAMSUNG_HD501LJ_S0MUJ13P727486-part8 failed

From a cryptsetup perspective that's perfectly alright. From a pam_mount perspective it would be much nicer if pam_mount could first check if the volume is already decrypted/mounted before invoking cryptsetup to do it again.

Surprise, that is exactly what it already does. You may want to enable debug in /etc/pam_mount.conf.xml. Regarding sudo, there was a pam_mount patch for one issue with sudo in pam_mount 1.30. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136#c11 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #11 from Christian Boltz 2009-11-18 10:46:15 CET --- (In reply to comment #10)

the sudo issue is handled in bug 555136.

Wrong bug number - you quoted the number of _this_ report... I guess you are talking about bug 544154 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136 http://bugzilla.novell.com/show_bug.cgi?id=555136#c13 --- Comment #13 from Stefan Tittel 2009-11-19 21:20:09 UTC --- Jan hinted that the cryptsetup behavior still breaks gksu and others. Whilst for my personal use case cryptsetup's behavior does not cause any problems, it would still be great to know which applications it in fact does break. Jan? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=555136 http://bugzilla.novell.com/show_bug.cgi?id=555136#c15 --- Comment #15 from Ludwig Nussel 2009-11-20 07:52:48 UTC --- gksu is not on the distro anyways -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.