https://bugzilla.novell.com/show_bug.cgi?id=390810 User tschmidt@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c1 --- Comment #1 from Thomas Schmidt 2008-05-15 08:24:44 MST --- Created an attachment (id=215613) --> (https://bugzilla.novell.com/attachment.cgi?id=215613) y2logs -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c2 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsuchome@novell.com AssignedTo|bnc-team-screening@forge.provo.novell.com |mc@novell.com --- Comment #2 from Jiří­ Suchomel 2008-05-15 08:28:34 MST --- Michael? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c4 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |thoenig@novell.com, jsrain@novell.com Severity|Normal |Major Status|NEW |NEEDINFO Info Provider| |mc@novell.com --- Comment #4 from Jiří­ Suchomel 2008-05-16 01:24:00 MST --- This is bad. Why is it not possible? This looks like a bug in pam_whatever. Anyway, I can't really silently disable some service that is already configured. The ease part would be, if pam_thinkfinger is configured, do not allow encrypted directories. But user should know why it is not possible (and we can't add new texts now, can we?) The other way is, do not allow pam_thinkfinger when pam_mount is configured. Does it mean that even installing of pam_thinkfinger fails (because it does PAM configuration in the post-script)? On the YaST side, again thingfinger configuration should be disabled (btw, how do I check pam_mount is configured to disable it? Does it mean, "volume" section is defined?) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c6 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|mc@novell.com | --- Comment #6 from Michael Calmer 2008-05-16 02:18:22 MST --- I think yast has an agent for pam-config. pam-config has a query option. # enabled $> pam-config -q --thinkfinger auth: account: password: session: $> # disabled $> pam-config -q --thinkfinger $> Have a look how the pam agent support this. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c8 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|mc@novell.com | --- Comment #8 from Michael Calmer 2008-05-16 02:38:10 MST --- Ahh, sorry. pam_mount has a special handling in pam-config, so the command is a little bit different. But checking via pam-config is ok. pam_mount is configured only in some special pam service files, not in the common-XXX-pc files. You have to query explicite the services. Example: $> pam-config --service xdm -q --mount Normally encrypted homepartitions are configured using cryptconfig. cryptconfig has a configfile where is configured which services should be changed. But I think it is ok, to check against a fixed list. gdm;login;kdm;xdm;sudo Call pam-config 5 times with the different values for --service above. If any of this query return that it is enabled, then it is enabled. Parsing pam_mount.conf.xml is not needed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c9 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |taroth@novell.com Status|ASSIGNED |NEEDINFO Info Provider| |mc@novell.com --- Comment #9 from Jiří­ Suchomel 2008-05-19 07:48:36 MST --- So, what about this message, shown in case user starts yast2 fingerprint-reader and has pam_mount configured: "Fingerprint reader device cannot be used when encrypted directories are present." (Adding Tanja: additionally, is it possible to mention in manual that those 2 features cannot work together?) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User taroth@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c11 --- Comment #11 from Tanja Roth 2008-05-20 01:09:44 MST --- Re:#9: sorry, we are past any authoring or localization deadline for the 11.0 manuals, so we can only add a note to the release notes for now. Karl, can you please add this to the current release notes? I'll make a note to add this to the manuals for the next revision, unless the problem can be solved technically until then. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User jsuchome@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c13 Jiří­ Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #13 from Jiří­ Suchomel 2008-05-20 02:38:23 MST --- And the other part is done in yast2-users-2.16.31. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jsuchome@novell.com |ke@novell.com Status|REOPENED |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User ke@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c16 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #16 from Karl Eichwalder 2008-05-21 07:41:17 MST --- done. -> /work -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User ke@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c18 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #18 from Karl Eichwalder 2008-05-29 06:17:14 MDT --- Ladislav complains that the RN entry is too short (bug 395125): There is this paragraph in Rel. Notes: -- Fingerprint Reader Devices and Encrypted Directories Fingerprint reader devices cannot be used when directories are encrypted. -- But this information is too generic. Couldn't it be more specific which directories should not be encrypted? Just home directories or system directories? Or any? I have no idea how it works and many users either. ========================================================================= What do you think? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO Info Provider| |jsuchome@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User ke@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c21 --- Comment #21 from Karl Eichwalder 2008-05-30 07:44:29 MDT --- to play save, I'll add "such as home directories" for the moment. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User ke@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c23 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |ASSIGNED --- Comment #23 from Karl Eichwalder 2008-06-03 02:56:15 MDT --- We need it more positive ;) Thus I propose this version: <!-- Bug 390810 --> <sect3 id="fingerprint-crypt" status="2008-05-30"> <title>Fingerprint Reader Devices and Encrypting Directories</title> <para>If you want to use a fingerprint reader device, you must not encrypt the home directory. Otherwise logging in will fail, because decrypting during login is not possible in combination with an active fingerprint reader device.</para> <para>To work around this limitation, setup a separate directory outside of the home directory and encrypt it manually.</para> </sect3> -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=390810 User ke@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=390810#c25 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #25 from Karl Eichwalder 2008-06-10 23:38:50 MDT --- forgot to click "fixed"... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.