Comment 13 for bug 364015

Revision history for this message
Dustin Kirkland  (kirkland) wrote : Re: Auto mount of encrypted home directory RANDOMLY stops to work

Okay, I finally have my head wrapped around this bug.

So here's the deal...

To mount your home directory, you *must* provide your login passphrase at some point, because this passphrase is used "unwrap" your wrapped-passphrase file. This is what you're doing when you run "sudo". Sudo prompts you for your passphrase, which walks the pam stack and mounts your home directory.

I'm going to update the title of this bug. What you're really asking for, is to have a second wrapped-passphrase file, perhaps called ~/.ecryptfs/wrapped-passphrase.ssh, which is wrapped with your ssh private key instead of your system login passphrase.

I am going to need to study the implementation of pam_ssh and authorized_keys...

Thanks for the report and research.

:-Dustin