Re: GELI recovery

2007-04-25 Thread Oliver Peter
On Wed, Apr 25, 2007 at 12:40:50AM -0400, Rat Paranoid wrote:
 Dear All,

Dear Mr. Rat Paranoid,
 
 I badly need your help! I've used GELI encrypted partition on my
 notebook for 5 month but now I can't mount it on startup... it seems
 that I forgot the password (but how is it possible if I enter it each
 time I switch my notebook?!) or something is wrong with GELI
 
 anyway when I created that partition I also created backup key file
 as it was suggested by the manual... Now I've tried to mount the
 partition with that key but it keeps telling me that the password is
 wrong. %(
 
 Is it possible to recover the bloody thing with that backup key?!
 
 Your help would be much appreciated!

You can provide us your dmesg debug output by adding the following lines
to /boot/loader.conf:

kern.geom.eli.debug=3

GELI(8) says:
   Debug level of the ELI GEOM class.  This can be set to a number
   between 0 and 3 inclusive.  If set to 0, minimal debug informa-
   tion is printed.  If set to 3, the maximum amount of debug infor-
   mation is printed.

For yourself you can add:

kern.geom.eli.visible.passphrase=1

GELI(8) says:
If set to 1, the passphrase entered on boot (before the root file
   system is mounted) will be visible.  This possibility should be
   used with caution as the entered passphrase can be logged and
   exposed via dmesg(8).  This variable should be set in
   /boot/loader.conf.

Good luck.

-- 
Oliver PETER, email: [EMAIL PROTECTED], ICQ# 113969174
Worker bees can leave. Even drones can fly away. The Queen is their slave.


pgpyD6rl6UKp0.pgp
Description: PGP signature


Re: GELI recovery

2007-04-25 Thread Rat Paranoid

I can't attach the partition through geli attach. It keeps asking the
password and teling that it is wrong

On 4/25/07, Karsten Rothemund [EMAIL PROTECTED] wrote:

is the key realy gone or can the encrypted partition just not be
mounted?

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: GELI recovery

2007-04-25 Thread Alexey Kuzmenko

I've turned on debugging and visible password with:

kern.geom.eli.debug=3
kern.geom.eli.visible_passphrase=1

but have nothing in the dmesg concerning my ad0s2 partition and it
keeps telling Wrong key for ad0s2. May be I should fsck it before
doing a geli attachment?

--
Alexey S Kuzmenko [EMAIL PROTECTED]
GPG: 0x93AD13DD (C9ED F720 D693 E707 571A E49A 0173 2F04 93AD 13DD)
nic-hdl - ASK1-RIPE
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: GELI recovery

2007-04-25 Thread Oliver Peter
On Wed, Apr 25, 2007 at 02:47:26PM -0400, Alexey Kuzmenko wrote:
 I've turned on debugging and visible password with:
 
 kern.geom.eli.debug=3
 kern.geom.eli.visible_passphrase=1

Did you make a reboot?
 
 but have nothing in the dmesg concerning my ad0s2 partition and it
 keeps telling Wrong key for ad0s2. May be I should fsck it before
 doing a geli attachment?

No, of course not. 
You have to attach the geli device before you can perform any action
on it (in your example a fsck).
Otherwise you will completely destroy your crypto device.

If you really have forgotten your password nobody can help you.

-- 
Oliver PETER, email: [EMAIL PROTECTED], ICQ# 113969174
Worker bees can leave. Even drones can fly away. The Queen is their slave.


pgp3fcrezou9o.pgp
Description: PGP signature


GELI recovery

2007-04-24 Thread Rat Paranoid

Dear All,

I badly need your help! I've used GELI encrypted partition on my
notebook for 5 month but now I can't mount it on startup... it seems
that I forgot the password (but how is it possible if I enter it each
time I switch my notebook?!) or something is wrong with GELI

anyway when I created that partition I also created backup key file
as it was suggested by the manual... Now I've tried to mount the
partition with that key but it keeps telling me that the password is
wrong. %(

Is it possible to recover the bloody thing with that backup key?!

Your help would be much appreciated!

Alex
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]