Friday, August 6, 2010

eCryptFS and SSH authorized_keys

I updated ubuntu earlier this week which broke ssh via public key encryption if your home directory is encrypted with eCryptFS. Here's the error from my /var/log/auth.log file:
sshd[27665]: Passphrase key already in keyring; rc = [1]
sshd[27665]: ecryptfs_add_passphrase_key_to_keyring: Error adding auth tok with sig [679363337585871a] to the keyring; rc = [1]
sshd[27665]: Error attempting to add filename encryption key to user session keyring; rc = [1]

The problem is your encrypted home directory is not mounted if you are not logged in, so the authorized_keys file which is normally in your ~/.ssh/ path doesn't exist yet. The solution is to login with your encrypted home directory unmounted and recreate the .ssh/authorized_keys file in the unmounted state. Described here.
$ /sbin/umount.ecryptfs_private
$ cd $HOME
$ chmod 700 .
$ sudo mkdir -m 700 .ssh
$ chmod 500 .
$ echo $YOUR_PUBLIC_KEY > .ssh/authorized_keys
$ /sbin/mount.ecryptfs_private

Note that you must do this for all users who want to login with ssh.

6 comments:

  1. Merkur Progress Adjustable Safety Razor - Chasing Spirits
    ‎Features planet win 365 · ‎The Adjustable Safety Razor ( Merkur 메리트카지노 Progress) · ‎Safety Razor · ‎Features · クイーンカジノ ‎Overall Review

    ReplyDelete
  2. That’s why we gave a better ranking to sites that supply the fullest vary of cell compatibility throughout their video games. While this online on line casino does provide several of} bonuses and promotions, it isn't that competitive when in comparison with} others we now have mentioned above. While there are lots of|there are numerous} advantages of using Bovada, some players imagine that it posts cash traces too near sport time for some people’s comfort. On the bright aspect, there are lots of|there are numerous} different types of|several varieties of|various kinds of} video games you can to|you probably can} play on Bovada. While the variety of them could be limited, the standard is actually 카지노 사이트 very excessive.

    ReplyDelete
  3. They will promote themselves as roulette cheat ideas and assure you straightforward money. Before you splash the cash and use them, you need to} definitely attempt them on a demo roulette sport. Without a free experience, you can lose all your money in the blink of an eye. Type of roulette online at no cost, find a way to|you 소울카지노 presumably can} put these methods to the test.

    ReplyDelete
  4. Depending on the fee possibility you're be} utilizing, the payouts can take wherever from 1 안전 바카라 hour to 48 hours. Payment clever, Red Dog helps a great amount of fee choices. If you need to receive your payouts as quick as attainable, ought to use|you need to use} Bitcoin. Bovada Casino works well even on gadgets with smaller screens, such as iPhones and iPads.

    ReplyDelete
  5. But it’s not the number of high-quality video games that steered us right here – it’s something else. casino.edu.kg For any questions or issues, Red Dog provides 24/7 customer assist by way of stay chat, but might also|you can even} get assistance via telephone and e-mail. Finally, we aren't the only ones who are confident in our talents. Gambling.com has received numerous awards through the years, including EGR Affiliate of the Year in 2021. And, only for good measure, Gambling.com was the first on-line playing affiliate publicly traded in the US on Nasdaq.

    ReplyDelete
  6. Withdrawals processing takes only a few hours for cryptocurrencies, whereas financial institution transfers and credit/debit card withdrawals take around 3 to 5 days. While this may 메리트카지노 seem like an trade standard, Everygame goes the additional mile to field dedicated e mail addresses for its sportsbook and poker sections. You'll discover over 20 totally different progressive games to play, together with high-paying jackpot titles providing tons of of hundreds of dollars. Some progressive games to watch out for embrace Mega Money Mine and Aztec Millions.

    ReplyDelete