Fix committed, will be released in version -65
** Changed in: ecryptfs
Status: Triaged => Fix Committed
--
ecryptfs-utils does not work with LDAP/Kerberos users
https://bugs.launchpad.net/bugs/293433
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.
Status in eCryptfs - Enterprise Cryptographic Filesystem: Fix Committed
Status in “ecryptfs-utils” source package in Ubuntu: Triaged
Bug description:
Ubuntu version: Intrepid 8.10
eCrypt-utils version: 53-1ubuntu12
slapd version: 2.4.11-0ubuntu6
krb5-* version: 1.6.dfsg.4~beta1-3
All my users use OpenLDAP and MIT Kerberos5 to login, pam.d common-* and
ldap.conf files are correctly configured, e.g. ldapwhoami reports:
[EMAIL PROTECTED]:~$ ldapwhoami
SASL/GSSAPI authentication started
SASL username: [EMAIL PROTECTED]
SASL SSF: 56
SASL data security layer installed.
dn:uid=testuser,ou=people,dc=xxxxx,dc=com
klist reports:
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal
11/04/08 14:21:28 11/05/08 14:21:28 krbtgt/[EMAIL PROTECTED]
11/04/08 14:27:42 11/05/08 14:21:28 ldap/[EMAIL PROTECTED]
When using the tools from the ecryptfs-utils package such as:
ecryptfs-setup-private I get the following error:
ERROR: User [xxx] does not exist
e.g:
[EMAIL PROTECTED]:~$ ecryptfs-setup-private
ERROR: User [testuser] does not exist
This user only appears in LDAP and SASLAUTHD with Kerberos providing password
auth.
This becomes an issue when using dovecot-auth, e.g:
Nov 4 14:30:10 dj-dvant-server dovecot-auth: pam_ldap: error trying to bind as
user "uid=testuser,ou=people,dc=xxxxx,dc=com" (Invalid credentials)
Nov 4 14:30:10 dj-dvant-server dovecot-auth: pam_sm_authenticate: Called
Nov 4 14:30:10 dj-dvant-server dovecot-auth: pam_sm_authenticate: username =
[testuser]
Nov 4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to parse
.ecryptfsrc file; rc = [-5]
Nov 4 14:30:10 dj-dvant-server dovecot-auth: Unable to read salt value from
user's .ecryptfsrc file; using default
Nov 4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to open
[/home/testuser/.ecryptfs/wrapped-passphrase] for reading
Nov 4 14:30:10 dj-dvant-server dovecot-auth: Error attempting to unwrap
passphrase from file [/home/testuser/.ecryptfs/wrapped-passphrase]; rc = [-5]
Nov 4 14:30:10 dj-dvant-server dovecot-auth: Error adding passphrase key token
to user session keyring; rc = [-5]
_______________________________________________
Mailing list: https://launchpad.net/~ecryptfs
Post to : [email protected]
Unsubscribe : https://launchpad.net/~ecryptfs
More help : https://help.launchpad.net/ListHelp
