[Ecryptfs] [Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

2009-07-24 Thread Dustin Kirkland
Hello- I've spent quite a bit of time on this, and I really don't think this can be solved properly. If you can engineer a design that works, I'm all ears. Thanks. :-Dustin ** Changed in: ecryptfs-utils (Ubuntu) Status: Confirmed = Won't Fix ** Changed in: ecryptfs Status:

[Ecryptfs] [Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

2009-05-12 Thread Alexander Kraev
Hi Dustin, Thanks a lot for explanation. Unfortunately such kind of home directory encryption doesn't suit my needs. So, I have encrypted home directory and I able to mount it only with login passphrase our mount it manually in case of public key auth. In the last case I have to mount directory

Re: [Ecryptfs] [Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

2009-05-12 Thread Dustin Kirkland
On Tue, May 12, 2009 at 1:28 PM, Alexander Kraev alexander.kr...@gmail.com wrote: Is there any way to mount encrypted home directory manually only once(on server restart)? Yes. Remove your $HOME/.ecryptfs/auto-umount file. This will tell PAM not to unmount on logout. :-Dustin -- Support a

[Ecryptfs] [Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

2009-05-02 Thread Dustin Kirkland
Having talked to Colin Watson, this is actually quite a complicated request. When doing ssh authentication, your private ssh key is not actually sent to the host system. Instead, the client signs a message with the private key, and sends this to the server, which authenticates the message using

[Ecryptfs] [Bug 364015] Re: Support a wrapped-passphrase.ssh, wrapped with an ssh private key

2009-05-01 Thread Dustin Kirkland
** Summary changed: - Auto mount of encrypted home directory RANDOMLY stops to work + Support a wrapped-passphrase.ssh, wrapped with an ssh private key ** Changed in: ecryptfs Importance: Low = Wishlist ** Changed in: ecryptfs Status: Incomplete = Confirmed ** Changed in: