https://bugzilla.novell.com/show_bug.cgi?id=461333 User meissner@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c1 --- Comment #1 from Marcus Meissner 2009-01-09 06:41:22 MST --- or perhaps pam_mount, which would be mc@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c2 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jengelh@medozas.de Status|NEW |ASSIGNED --- Comment #2 from Michael Calmer 2009-01-10 08:34:49 MST --- Enter the following in your /etc/security/pam_mount.conf.xml: <logout wait="2000" hup="0" term="1" kill="1"/> A logout line is available in the original config. This option is new and if you made an update from an older version, that this line is not in your configfile. But I found out, that it does not help in case of pulseaudio, because of a bug in pam_mount. If pam_mount tries to find out which binaries might block an umount it does not scan for open file descriptors correctly. The result is, that pulseaudio is not killed. I will make a patch for this. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c4 --- Comment #4 from Egbert König 2009-01-10 16:48:13 MST --- (In reply to comment #3)

Created an attachment (id=264313) --> (https://bugzilla.novell.com/attachment.cgi?id=264313) [details] patch for the logout problem

I have tried to build pam_mount from the source rpm with your patch. It was not possible because dependencies to libHX which I could not solve. First rpmbuild requested libHX-devel for the build, which is not available for openSuSE 111. I have removed that from the spec file but than configure could not run pkgconfig for libHX. I have changed the dependency in configure.ac to libHX13, which is available for openSuSE 11.1, but pkgconfig was still not successfull. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c6 --- Comment #6 from Egbert König 2009-01-11 16:10:00 MST --- I have installed pam_mount 1.8 from the openSuSE build service (home:jnelson-suse). With this version I cannot mount my crypted home any more. I have switched debug on in pam_mount.conf.xml and saved the logs for pam_mount 0.47, which mounts my home, and pam_mount 1.8, which doesn't. mount.crypt fails with the message "No key available with this passphrase". -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c8 --- Comment #8 from Egbert König 2009-01-11 16:12:24 MST --- Created an attachment (id=264385) --> (https://bugzilla.novell.com/attachment.cgi?id=264385) syslog: failed mount with pam_mount 1.8 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c10 --- Comment #10 from Michael Calmer 2009-01-12 03:04:13 MST --- (In reply to comment #5)

The problem was fixed in pam_mount 1.3 already (and without requiring another 256 bytes of stack storage).

Jan: Sorry, but your fix seems to be wrong. You append /fd in ofl_taskfd(), but this function expect, that it is already "in" /fd. Append /fd in ofl_task() should work. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c12 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #12 from Michael Calmer 2009-01-12 07:31:14 MST --- Fix submitted -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c14 --- Comment #14 from Michael Calmer 2009-01-13 01:33:17 MST --- Will take some time because of internal procedures. I have submitted this to a internal directory. Now it must be check-in, build, QA tests and then it will be released for 11.1. I have also submitted it for Factory, which release might be faster. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c16 --- Comment #16 from Egbert König 2009-01-13 11:47:42 MST --- (In reply to comment #15)

ftp://ftp5.gwdg.de/pub/linux/misc/suser-jengelh/SUSE-11.1/x86_64/pam_mount-1.9-jen0.x86_64.rpm

Thank you, I have checked it out together with libHX18 and tested it. I still get the error "pam_mount(mount.c:78): Command failed: No key available with this passphrase." -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c18 Egbert König changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P2 - High Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #18 from Egbert König 2009-01-24 08:35:11 MST --- The hash option did'nt help. Why is this bug marked "resolved" and closed? I haven't seen a working fix yet, neither "official" through YOU update nor "inofficial" through this ticket. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c20 --- Comment #20 from Egbert König 2009-01-24 10:40:04 MST --- Created an attachment (id=267468) --> (https://bugzilla.novell.com/attachment.cgi?id=267468) output from mount.crypt -v ... Sorry, here is the output from mount.crypt -v -ofsk_cipher=aes-256-cbc,fsk_hash=sha1 -okeyfile=/home/egbert.key /home/egbert.img /home/egbert -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c22 --- Comment #22 from Egbert König 2009-01-24 15:42:26 MST --- (In reply to comment #21)

pam_mount before 1.0 always used md5 for fsk_hash. You need ot use that instead of sha1 then.

mount.crypt -v -ofsk_cipher=aes-256-cbc,fsk_hash=md5,keyfile=/home/egbert.key /home/egbert.img /home/egbert works. Here is the output: command: [readlink] [-fn] [/home/egbert.img] command: [readlink] [-fn] [/home/egbert] Password: mount.crypt(loop.c:124): Setting up loop device for file /home/egbert. img mount.crypt(loop.c:135): Using /dev/loop0 mount.crypt(crypto-dmc.c:137): Using _home_egbert_img as dmdevice name command: [cryptsetup] [luksOpen] [/dev/loop0] [_home_egbert_img] Command successful. key slot 0 unlocked. command: [mount] [-n] [/dev/mapper/_home_egbert_img] [/home/egbert] umount.crypt -v /home/egbert does not work. Here is the output: Command failed. umount.crypt(crypto-dmc.c:160): Could not unload dm-crypt device "/dev/mapper/_home_egbert_img", cryptsetup returned HXproc status 237 I will provide strace output in an attachment. pam_mount still does not work. I will attach debug messages from /var/log/messages and pam_mount.xml. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c24 --- Comment #24 from Egbert König 2009-01-24 15:48:07 MST --- Created an attachment (id=267480) --> (https://bugzilla.novell.com/attachment.cgi?id=267480) debug output in /var/log/messages -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User jengelh@medozas.de added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c26 --- Comment #26 from Jan Engelhardt 2009-01-24 16:06:47 MST ---

cryptsetup returned HXproc status 237 16701 execve("/sbin/cryptsetup", ["cryptsetup", "remove", "O\25@"], [/* 74 vars */]) = 0

Something looks fishy yet. Can you try `valgrind umount.crypt /mnt`? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c28 --- Comment #28 from Egbert König 2009-01-24 16:24:57 MST --- Created an attachment (id=267483) --> (https://bugzilla.novell.com/attachment.cgi?id=267483) valgrind -v umount.crypt -v /home/egbert This contains some interesting output. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User mc@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c30 Michael Calmer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #30 from Michael Calmer 2009-01-26 03:34:21 MST --- (In reply to comment #18)

The hash option did'nt help. Why is this bug marked "resolved" and closed? I haven't seen a working fix yet, neither "official" through YOU update nor "inofficial" through this ticket.

As I said in Comment #14 it will take some time. Our policy say, mark this bug as fixed as soon as the fix is submitted in our buildsystem. Btw: this bug was about umounting do not work. This does not include issues with the latest upstream version. But it looks like they are now solved too :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User e.kunig@home.nl added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c32 --- Comment #32 from Egbert König 2009-01-27 12:04:20 MST --- (In reply to comment #29)

Ok I had already eyeballed that one. http://dev.medozas.de/gitweb.cgi?p=pam_mount;a=commitdiff;h=c611578ae9c39ef8... Will release packaged update tomorrow.

mount.crypt and umount.crypt now work fine. The automatic mount on login however still does not work. I will create an attachment with debug output from /var/log/messages. There is one interesting sequence: Jan 27 19:27:06 zappa login[12459]: pam_mount(mount.c:181): Mount info: globalconf, user=egbert <volume server="(null)" path="/home/egbert img" mountpoint="/home/egbert" cipher="(null)" fskeypath="/home/egbert.key" fskeycipher="aes-256-cbc" fskeyhash="md5" options="loop" /> f stab=0 Jan 27 19:27:06 zappa login[12459]: pam_mount(mount.c:494): checking for encrypted filesystem key configuration Jan 27 19:27:06 zappa login[12459]: pam_mount(mount.c:497): about to start building mount command Jan 27 19:27:06 zappa login[12459]: command: [mount.crypt] [-o] [loop] [/home/egbert.img] [/home/egbert] The options (including the key hash) are read correctly from the configuration file but they are not passed to mount.crypt. The mount.crypt command line is just mount.crypt -o loop /home/egbert.img /home/egbert while it should contain the fsk_... options as well. Without these options the key cannot be found in the key file. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=461333 User jengelh@medozas.de added comment https://bugzilla.novell.com/show_bug.cgi?id=461333#c34 --- Comment #34 from Jan Engelhardt 2009-01-27 12:49:56 MST --- Make sure /etc/security/pam_mount.conf.xml does not override the mountcrypt command. Ideally, /etc/security/pam_mount.conf.xml should only contain what is in http://dev.medozas.de/gitweb.cgi?p=pam_mount;a=blob;f=config/pam_mount.conf.... plus your volume definitions or specific overrides. I am afraid many people carry the cruft from previous versions in their config files, but what's more, we cannot easily remove such definitions from the cfg file (because it might have been put there on purpose by the user) :-/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.