Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
pam_mount broken by update
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
parthenon
n00b
n00b


Joined: 05 Aug 2008
Posts: 21
Location: USA

PostPosted: Wed Aug 06, 2008 1:04 am    Post subject: pam_mount broken by update Reply with quote

Hi everyone,

On my latest "emerge -auvD world", pam got updated to 1.0.1, pambase got updated to 20080318, and pam_mount got updated to 0.43. This seems to have broken pam_mount, since it no longer mounts any directories :cry:
When I turn on debugging in /etc/security/pam_mount.conf.xml, I get the following output at a console login (after typing in password):

========
Password:
pam_mount(pam_mount.c:306) saving authtok for session code (authtok=0x6267b0)
pam_mount(pam_mount.c:458) Entered pam_mount session stage
pam_mount(pam_mount.c:479) back from global readconfig
pam_mount(pam_mount.c:481) per-user configurations not allowed by pam_mount.conf.xml
pam_mount(misc.c:43) Session open: (uid=1000, euid=0, gid=1004, egid=1004)
pam_mount(rdconf2.c:181) checking sanity of volume record (/dev/sda11)
pam_mount(pam_mount.c:533) about to perform mount operations
pam_mount(mount.c:366) information for mount:
pam_mount(mount.c:367) ----------------------
pam_mount(mount.c:368) (defined by globalconf)
pam_mount(mount.c:369) user: sourish
pam_mount(mount.c:370) server:
pam_mount(mount.c:371) volume: /dev/sda11
pam_mount(mount.c:372) mountpoint: /usr/home
pam_mount(mount.c:373) options: cipher=blowfish-cbc-essiv:sha256 hash=sha512 keysize=448
pam_mount(mount.c:374) fs_key_cipher: bf-cbc
pam_mount(mount.c:375) fs_key_path: /etc/crypt.keys/usrhome.key.sourish
pam_mount(mount.c:376) use_fstab: 0
pam_mount(mount.c:377) ----------------------
pam_mount(mount.c:170) realpath of volume "/usr/home" is "/usr/home"
pam_mount(mount.c:174) checking to see if /dev/mapper/_dev_sda11 is already mounted at /usr/home
pam_mount(mount.c:848) checking for encrypted filesystem key configuration
pam_mount(mount.c:857) decrypting FS key using system auth. token and bf-cbc
pam_mount(mount.c:874) about to start building mount command
pam_mount(misc.c:272) command: mount [-t] [crypt] [-o cipher=blowfish-cbc-essiv:sha256 hash=sha512 keysize=448] [/dev/sda11] [/usr/home]
pam_mount(misc.c:43) set_myuid<pre>: (uid=1000, euid=0, gid=1004, egid=1004)
pam_mount(misc.c:43) set_myuid<post>: (uid=0, euid=0, gid=1004, egid=1004)
========

and everything remains stuck here eternally. The relevant portion of my /etc/security/pam_mount.conf.xml is:

========
<volume user="myself"
path="/dev/sda11"
mountpoint="/usr/home"
fstype="crypt"
options="cipher=blowfish-cbc-essiv:sha256 hash=sha512 keysize=448"
fskeypath="/etc/crypt.keys/usrhome.key.myself"
fskeycipher="bf-cbc" />
========

This was working perfectly until this morning, when I updated my packages!

I used

openssl bf-cbc -d -in /etc/crypt.keys/usrhome.key.myself | cryptsetup -c blowfish-cbc-essiv:sha256 -h sha512 -s 448 -b `blockdev --getsize /dev/sda11` create usrhome /dev/sda11

to manually create a mountpoint and check the filesystem -- it's fine. So I finally disabled pam_mount, manually mounted /usr/home this way, and that's how I'm composing this post.

What am I missing? :? Please help!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum