Package: ecryptfs-utils
Version: 71-1
Severity: normal
As I see /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz ,
/etc/pam.d/system-auth is mentioned. I do not see such file in Debian
nor in Ubuntu. What is going on? Is this meant to be
/etc/pam.d/common-auth?
Then /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz states:
> The following line needs to be added to /etc/pam.d/system-auth,
> immediately below the line referencing the pam_unix.so module in the
> auth context:
>
> auth required pam_ecryptfs.so unwrap
If /etc/pam.d/system-auth is /etc/pam.d/common-auth, line referencing the
pam_unix.so module and following active lines are:
> auth [success=1 default=ignore] pam_unix.so nullok_secure
> auth requisite pam_deny.so
> auth required pam_permit.so
Clearly, immediately below the line referencing the pam_unix.so module is wrong
place to put it. I suppose it should be between pam_deny.so and pam_permit.so.
Back to /usr/share/doc/ecryptfs-utils/ecryptfs-pam-doc.txt.gz states:
> The following line needs to be added to /etc/pam.d/system-auth,
> immediately above the line referencing the pam_unix.so module in the
> password context:
>
> password required pam_ecryptfs.so
I guess you mean /etc/pam.d/common-password. Also I can mount it without
having fstab file as described.
Besides, what pam_ecryptfs(8) ask to add:
/etc/pam.d/common-auth:
auth required pam_ecryptfs.so unwrap
/etc/pam.d/common-session:
session optional pam_ecryptfs.so unwrap
The ecryptfs-pam-doc.txt.gz seems to be not in synch with this description and
manpage is unclear about where to put this new lines. Please update this
document.
Osamu
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (10, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages ecryptfs-utils depends on:
ii keyutils 1.2-10 Linux Key Management Utilities
ii libc6 2.9-4 GNU C Library: Shared libraries
ii libecryptfs0 71-1 ecryptfs cryptographic filesystem
ii libgcrypt11 1.4.4-2 LGPL Crypto library - runtime libr
ii libgpg-error0 1.6-1 library for common error values an
ii libgpgme11 1.1.8-2 GPGME - GnuPG Made Easy
ii libkeyutils1 1.2-10 Linux Key Management Utilities (li
ii libpam0g 1.0.1-9 Pluggable Authentication Modules l
ecryptfs-utils recommends no packages.
Versions of packages ecryptfs-utils suggests:
ii cryptsetup 2:1.0.6-7 configures encrypted block devices
pn opencryptoki <none> (no description available)
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]