You are not logged in.
Hi,
after upgrade of lightdm and liblightdm-qt4 today I can't open anymore my LUKS-dmcrypt-encrypted home-partition and LUKS-dmcrypt-encrypted backup-partition using pam_mount.
Journal bad-case:
Okt 01 23:52:25 dixi-arch lightdm[509]: pam_succeed_if(lightdm-autologin:auth): requirement "user ingroup autologin" not met by user "dixi"
Okt 01 23:52:25 dixi-arch lightdm[464]: pam_unix(lightdm-greeter:session): session closed for user lightdm
Okt 01 23:52:26 dixi-arch lightdm[509]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:26 dixi-arch lightdm[425]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:26 dixi-arch lightdm[509]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:26 dixi-arch lightdm[509]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:26 dixi-arch lightdm[425]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:26 dixi-arch lightdm[425]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:28 dixi-arch kernel: NET: Registered protocol family 38
Okt 01 23:52:29 dixi-arch lightdm[509]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:29 dixi-arch lightdm[425]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:29 dixi-arch lightdm[509]: (pam_mount.c:522): mount of /dev/sda3 failed
Okt 01 23:52:29 dixi-arch lightdm[425]: (pam_mount.c:522): mount of /dev/sda3 failed
Okt 01 23:52:29 dixi-arch lightdm[509]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:29 dixi-arch lightdm[509]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:29 dixi-arch lightdm[425]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:29 dixi-arch lightdm[425]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:32 dixi-arch lightdm[509]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:32 dixi-arch lightdm[509]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Okt 01 23:52:32 dixi-arch lightdm[509]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:32 dixi-arch lightdm[509]: pam_unix(lightdm-autologin:session): session opened for user dixi by (uid=0)
Okt 01 23:52:32 dixi-arch systemd[536]: (pam_mount.c:173): conv->conv(...): Conversation error
Okt 01 23:52:32 dixi-arch systemd[536]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:32 dixi-arch systemd[536]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:32 dixi-arch systemd[536]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:32 dixi-arch systemd[1]: Starting user-1000.slice.
Okt 01 23:52:32 dixi-arch systemd[1]: Created slice user-1000.slice.
Okt 01 23:52:32 dixi-arch systemd[1]: Starting User Manager for UID 1000...
Okt 01 23:52:32 dixi-arch systemd[1]: Starting Session c2 of user dixi.
Okt 01 23:52:32 dixi-arch systemd-logind[400]: New session c2 of user dixi.
Okt 01 23:52:32 dixi-arch systemd[1]: Started Session c2 of user dixi.
Okt 01 23:52:32 dixi-arch lightdm[425]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:32 dixi-arch lightdm[425]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Okt 01 23:52:32 dixi-arch lightdm[425]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:32 dixi-arch systemd[536]: (pam_mount.c:173): conv->conv(...): Conversation error
Okt 01 23:52:32 dixi-arch systemd[536]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:32 dixi-arch systemd[536]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:32 dixi-arch systemd[536]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:35 dixi-arch systemd[536]: (pam_mount.c:522): mount of /dev/sda3 failed
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:35 dixi-arch systemd[536]: (pam_mount.c:522): mount of /dev/sda3 failed
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:68): Messages from underlying mount program:
Okt 01 23:52:35 dixi-arch systemd[536]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Okt 01 23:52:38 dixi-arch systemd[536]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:38 dixi-arch systemd[536]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:173): conv->conv(...): Conversation error
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:173): conv->conv(...): Conversation error
Okt 01 23:52:38 dixi-arch systemd[536]: (pam_mount.c:477): warning: could not obtain password interactively either
Okt 01 23:52:38 dixi-arch systemd[536]: pam_unix(systemd-user:session): session opened for user dixi by (uid=0)Journal good case (you see, there were always errors, but it worked):
Sep 30 20:04:36 dixi-arch lightdm[480]: pam_unix(lightdm-greeter:session): session closed for user lightdm
Sep 30 20:04:36 dixi-arch lightdm[525]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:36 dixi-arch lightdm[525]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:36 dixi-arch lightdm[438]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:36 dixi-arch lightdm[438]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:38 dixi-arch kernel: NET: Registered protocol family 38
Sep 30 20:04:39 dixi-arch lightdm[525]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:39 dixi-arch lightdm[525]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:39 dixi-arch lightdm[438]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:39 dixi-arch lightdm[438]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:39 dixi-arch kernel: EXT4-fs (dm-1): mounted filesystem with ordered data mode. Opts: (null)
Sep 30 20:04:42 dixi-arch kernel: sde: unknown partition table
Sep 30 20:04:43 dixi-arch kernel: EXT4-fs (dm-2): mounted filesystem with ordered data mode. Opts: (null)
Sep 30 20:04:43 dixi-arch lightdm[525]: pam_unix(lightdm:session): session opened for user dixi by (uid=0)
Sep 30 20:04:43 dixi-arch systemd[1]: Starting user-1000.slice.
Sep 30 20:04:43 dixi-arch systemd[1]: Created slice user-1000.slice.
Sep 30 20:04:43 dixi-arch systemd[1]: Starting User Manager for UID 1000...
Sep 30 20:04:43 dixi-arch systemd[1]: Starting Session c2 of user dixi.
Sep 30 20:04:43 dixi-arch systemd-logind[426]: New session c2 of user dixi.
Sep 30 20:04:43 dixi-arch systemd[1]: Started Session c2 of user dixi.
Sep 30 20:04:43 dixi-arch systemd[578]: (pam_mount.c:173): conv->conv(...): Conversation error
Sep 30 20:04:43 dixi-arch systemd[578]: (pam_mount.c:477): warning: could not obtain password interactively either
Sep 30 20:04:43 dixi-arch systemd[578]: (pam_mount.c:173): conv->conv(...): Conversation error
Sep 30 20:04:43 dixi-arch systemd[578]: (pam_mount.c:477): warning: could not obtain password interactively either
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:72): crypt_activate_by_passphrase: File exists
Sep 30 20:04:43 dixi-arch systemd[578]: (mount.c:72): crypt_activate_by_passphrase: File exists
Sep 30 20:04:47 dixi-arch systemd[578]: (pam_mount.c:522): mount of /dev/sda3 failed
Sep 30 20:04:47 dixi-arch systemd[578]: (pam_mount.c:522): mount of /dev/sda3 failed
Sep 30 20:04:47 dixi-arch systemd[578]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:47 dixi-arch systemd[578]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:47 dixi-arch systemd[578]: (mount.c:68): Messages from underlying mount program:
Sep 30 20:04:48 dixi-arch systemd[578]: (mount.c:72): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need
Sep 30 20:04:48 dixi-arch systemd[578]: (mount.c:72): crypt_activate_by_passphrase: File exists
Sep 30 20:04:48 dixi-arch systemd[578]: (mount.c:72): crypt_activate_by_passphrase: File exists
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:173): conv->conv(...): Conversation error
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:477): warning: could not obtain password interactively either
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:522): mount of /dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f failed
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:173): conv->conv(...): Conversation error
Sep 30 20:04:52 dixi-arch systemd[578]: (pam_mount.c:477): warning: could not obtain password interactively either
Sep 30 20:04:52 dixi-arch systemd[578]: pam_unix(systemd-user:session): session opened for user dixi by (uid=0)These are the new log-entries; I've never seen before:
Okt 01 23:52:25 dixi-arch lightdm[509]: pam_succeed_if(lightdm-autologin:auth): requirement "user ingroup autologin" not met by user "dixi"
...
Okt 01 23:52:29 dixi-arch lightdm[509]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted
Okt 01 23:52:29 dixi-arch lightdm[425]: (mount.c:72): crypt_activate_by_passphrase: Operation not permitted/etc/lightdm/lightdm.conf:
[LightDM]
minimum-vt=1
run-directory=/run/lightdm
[SeatDefaults]
allow-guest=false
autologin-guest=false
autologin-user=
greeter-session=lightdm-kde-greeter
pam-service=lightdm-autologin
session-wrapper=/etc/lightdm/Xsession
[VNCServer]
enabled=false
[XDMCPServer]
enabled=false/etc/security/pam_mount.conf.xml:
... standard
# <mkmountpoint enable="1" remove="true" />
<volume user="dixi" fstype="crypt" path="/dev/sda3" mountpoint="/home/dixi" option="fsck,relatime" />
<volume user="dixi" fstype="crypt" path="/dev/disk/by-uuid/f985abd2-98a4-4fb3-a3c0-a1bffc68550f" mountpoint="/backup" option="fsck,relatime" />
<mkmountpoint enable="1" remove="true" />
</pam_mount>/etc/pam.d/system-auth:
#%PAM-1.0
auth required pam_env.so
auth required pam_unix.so try_first_pass nullok
auth optional pam_mount.so
auth optional pam_permit.so
account required pam_unix.so
account optional pam_permit.so
account required pam_time.so
password optional pam_mount.so
password required pam_unix.so try_first_pass nullok sha512 shadow
password optional pam_permit.so
session optional pam_mount.so
session required pam_limits.so
session required pam_env.so
session required pam_unix.so
session optional pam_permit.soI'm using accountservice for the avatar.
Downgrading lightdm and liblightdm-qt4 to Version 1:1.10 -> everything works fine
Any idea ?
Thanks
Last edited by midixinga (2014-10-03 11:17:43)
Offline
It seems that the issue is in LightDM configuration. When I checked diff /etc/lightdm/lightdm.conf /etc/lightdm/lightdm.conf.pacnew, I saw that I had "pam-service=lightdm-autologin" enabled (probably some old default, I don't remember changing it). Commenting it out fixed the problem.
Offline
Hi glsk,
thanks a lot; I had closed my eyes, when I checked the new conf -> now it works
Offline