Bug 1047261 - ssh login does not mount encrypted home directory - cannot forward X traffic for users with encrypted home dir
Summary: ssh login does not mount encrypted home directory - cannot forward X traffic ...
Status: RESOLVED DUPLICATE of bug 954419
Alias: None
Product: openSUSE Distribution
Classification: openSUSE
Component: Basesystem (show other bugs)
Version: Leap 42.3
Hardware: x86-64 Other
: P5 - None : Normal (vote)
Target Milestone: ---
Assignee: E-mail List
QA Contact: E-mail List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-07-05 03:30 UTC by Tomas Kuchta
Modified: 2017-07-05 15:11 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tomas Kuchta 2017-07-05 03:30:49 UTC
openSuSE Leap 42.3 Build 300

Encrypted overlay image is not mounted at ssh login
Thus ssh is unable to forward X traffic for users with encrypted home directory or access user files.

Root cause:
-----------
Encrypted overlay image is not mounted at ssh login

Errors observed:
----------------
> ssh -X tomask@localhost
Password: 
Last login: Tue Jul  4 20:06:28 2017 from ::1
Have a lot of fun...
/usr/bin/xauth:  timeout in locking authority file /home/tomask/.Xauthority
> exit
logout
Connection to localhost closed.

harry@gurkin:~> ssh -Y tomask@localhost
Password: 
Last login: Tue Jul  4 20:07:23 2017 from ::1
Have a lot of fun...
/usr/bin/xauth:  timeout in locking authority file /home/tomask/.Xauthority
> ls -l /home/tomask/.Xauthority
ls: cannot access '/home/tomask/.Xauthority': No such file or directory

When logging in from TTY2 (Alt+Ctrl+F2):
----------------------------------------
> ls -l /home/tomask/.Xauthority
-rw------- 1 tomask users 113 Jul  4 20:06 /home/tomask/.Xauthority


How to reproduce:
-----------------
1. Create user with encrypted home directory using: yast2 users
2. run:
   ssh -X user@localhost
   ssh -Y user@localhost
3. see that the encrypted overlay image is not mounted by:
   mount | grep home
   If the crypto image is mounted (as when using tty login) you should see
   message like this:
   > mount | grep home
   /dev/mapper/_dev_loop0 on /home/tomask type ext3 (rw,relatime,data=ordered,helper=crypt)
Comment 1 Fabian Vogt 2017-07-05 15:11:17 UTC
Looks like same underlying issue as bug 954419.

*** This bug has been marked as a duplicate of bug 954419 ***