'error in locking authority file'

[mungewell]

Binary package hint: iceauth

I am using encrypted home directories with Encfs and libpam-encfs. These are a Fuse mounted partition.

This works fine, expect I noticed that the Logout/Exit XFCE button on the panel was failing to work properly when using encrypted home directory - displayed as a simpler pop-up and doesn't actually shut down the X session (just the XFCE panel).

I believe that this is due to iceauth failing to start up properly.

Error message in .xsession is:
---
/usr/bin/iceauth: error in locking authority file /home/kriszi/.ICEauthority

** (xfce4-session:5675): WARNING **: Failed to setup the ICE authentication data, session management might not work properly.

** (xfwm4:5681): WARNING **: The display does not support the XComposite extension.

** (xfwm4:5681): WARNING **: Compositing manager disabled.

** (xfce4-session:5675): WARNING **: ICE connection 0x8097c88 rejected
---

If I attempt to start iceauth manually it also fails
---
kriszi@borne:~$ /usr/bin/iceauth -f /home/kriszi/temp
/usr/bin/iceauth: error in locking authority file /home/kriszi/temp
---

but succeeds if I spec a file out of the encrypted mount
---
kriszi@borne:~$ /usr/bin/iceauth -f /tmp/kriszi
/usr/bin/iceauth: creating new authority file /tmp/kriszi
Using authority file /tmp/kriszi
iceauth> quit
---

Drive is mounted as:
---
kriszi@borne:~$ mount
<snip>
encfs on /home/kriszi type fuse (rw,nosuid,nodev,default_permissions,allow_other,allow_other,user=kriszi)
---

Any suggestions?
Simon.

[mungewell (simon-mungewell)]

Ok tracked the problem down to the fact that iceauth/libice6 can't create the file, or more precisely the hard link to the file. (Don't know why it needs two files, but that's what it does).

So the problem is with Encfs or FUSE....
Simon.

Sample code which shows failure attached.

[mungewell (simon-mungewell)]

Example which shows how Encfs does not appear to support hard linking.

Code similar to that in authutils.c from libice6
Simon.

[mungewell (simon-mungewell)]

From the Encfs mailing list.

On Wed, Jun 21, 2006 at 09:11:37AM -0700, Valient Gough wrote:
> I suspect you might be using 'paranoia mode'. If so, hard links will
> not work. If this is not the case, then please send along the
> encfsctl output showing the configuration options.
>

Yes I was using 'paranoia' mode, changing the encryption level to 'normal' mode made everything work as it should.

So bug is solved (sort of). I'll retarget this at libpam_encfs so to make this information easier to find should anyone have the same issues.

Simon.

[mungewell (simon-mungewell)]

This is the expected behaviour with 'paranoia' mode encryption - this level does not support hard links. Use a low level, i.e. 'normal'.

[Philip Paquette (pcpaquette)]

Rejecting bug for Ubuntu (undefined package).

[Philip Paquette (pcpaquette)]

Rejecting for encfs since this seems to be expected behaviour -> "This is the expected behaviour with 'paranoia' mode encryption - this level does not support hard links. Use a low level, i.e. 'normal'." If you think this is an error, you can always re-open the bug report. Thanks