Bug 1047261

Summary: ssh login does not mount encrypted home directory - cannot forward X traffic for users with encrypted home dir
Product: [openSUSE] openSUSE Distribution Reporter: Tomas Kuchta <tomas.kuchta>
Component: BasesystemAssignee: E-mail List <bnc-team-screening>
Status: RESOLVED DUPLICATE QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None CC: fvogt
Version: Leap 42.3   
Target Milestone: ---   
Hardware: x86-64   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Tomas Kuchta 2017-07-05 03:30:49 UTC
openSuSE Leap 42.3 Build 300

Encrypted overlay image is not mounted at ssh login
Thus ssh is unable to forward X traffic for users with encrypted home directory or access user files.

Root cause:
-----------
Encrypted overlay image is not mounted at ssh login

Errors observed:
----------------
> ssh -X tomask@localhost
Password: 
Last login: Tue Jul  4 20:06:28 2017 from ::1
Have a lot of fun...
/usr/bin/xauth:  timeout in locking authority file /home/tomask/.Xauthority
> exit
logout
Connection to localhost closed.

harry@gurkin:~> ssh -Y tomask@localhost
Password: 
Last login: Tue Jul  4 20:07:23 2017 from ::1
Have a lot of fun...
/usr/bin/xauth:  timeout in locking authority file /home/tomask/.Xauthority
> ls -l /home/tomask/.Xauthority
ls: cannot access '/home/tomask/.Xauthority': No such file or directory

When logging in from TTY2 (Alt+Ctrl+F2):
----------------------------------------
> ls -l /home/tomask/.Xauthority
-rw------- 1 tomask users 113 Jul  4 20:06 /home/tomask/.Xauthority


How to reproduce:
-----------------
1. Create user with encrypted home directory using: yast2 users
2. run:
   ssh -X user@localhost
   ssh -Y user@localhost
3. see that the encrypted overlay image is not mounted by:
   mount | grep home
   If the crypto image is mounted (as when using tty login) you should see
   message like this:
   > mount | grep home
   /dev/mapper/_dev_loop0 on /home/tomask type ext3 (rw,relatime,data=ordered,helper=crypt)
Comment 1 Fabian Vogt 2017-07-05 15:11:17 UTC
Looks like same underlying issue as bug 954419.

*** This bug has been marked as a duplicate of bug 954419 ***