Package: ecryptfs-utils
Version: 93-1
Severity: important

Whenever I unlock gnome-screensaver, if some time has passed in the locked
state, instead of showing the unlock box, a blank screen with only the title
bar (incl. date/time) is shown. The area of the screen that would be occupied
by the unlock dialog is active, and the cursor changes into a caret in the
right place. Indeed, you can type in the password, and after one abortive
attempt, when you have to kill gnome-screensaver-dialog from the console, it
eventually unlocks the screen (sometimes after more than 5 minutes waiting).

When this happens, /var/log/syslog contains the following lines:
Dec 11 20:18:38 <host> gnome-screensaver-dialog: pam_ecryptfs: Passphrase file 
wrapped
Dec 11 20:18:40 <host> gnome-screensaver-dialog: Error attempting to add 
filename encryption key to user session keyring; rc = [1] 
Dec 11 20:18:41 <host> gnome-screensaver-dialog: Error attempting to add 
passphrase key to user session keyring; rc = [1] 

Ecryptfs-utils includes the file /usr/share/pam-configs/ecryptfs-utils,
which ultimately adds a line to /etc/pam.d/common-auth. As shipped,
gnome-screensaver's PAM config (/etc/pam.d/gnome-screensaver) is:
@include common-auth
auth optional pam_gnome_keyring.so

The troubleshooting section of 
http://ecryptfs.sourceforge.net/ecryptfs-pam-doc.txt
state:
      Problem: Attempts to authenticate to the gnome-screensaver
      application result in a long pause and a failed attempt.

            Solution: Your PAM stack is not set up correctly. Make
            certain that /etc/pam.d/gnome-screensaver does not point
            to a file in the auth context that includes
            pam_ecryptfs.so.

So, ecryptfs-utils shouldn't add the line to common-auth. Unfortunately I don't
know what the correct thing to do is.

The problem may not be all to do with ecryptfs, but this certainly doesn't help

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.1.0-1-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ecryptfs-utils depends on:
ii  gettext-base    0.18.1.1-5             
ii  keyutils        1.5.2-2                
ii  libc6           2.13-21                
ii  libecryptfs0    93-1                   
ii  libgpg-error0   1.10-1                 
ii  libgpgme11      1.2.0-1.4              
ii  libkeyutils1    1.5.2-2                
ii  libnss3-1d      3.13.1.with.ckbi.1.88-1
ii  libpam-runtime  1.1.3-6                
ii  libpam0g        1.1.3-6                

ecryptfs-utils recommends no packages.

Versions of packages ecryptfs-utils suggests:
pn  cryptsetup    2:1.3.0-3
pn  opencryptoki  <none>   

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to