How to mount encrypted volume at login (Ubuntu 12.04, pam_mount)

Posted by Nick Lothian on Server Fault See other posts from Server Fault or by Nick Lothian
Published on 2012-04-26T11:29:14Z Indexed on 2012/10/22 5:05 UTC
Read the original article Hit count: 204

Filed under:

permissions

|

mount

|

encryption

|

disk

I'm trying to get pam_mount working on Ubuntu 12.04.

I have /dev/sda1 (encrypted partition) with /dev/dm-1 (ext4 formatted) inside it.

Should ~/.pam_mount.conf.xml be trying to mount /dev/sda1 or /dev/dm-1?

If I use the line:

<volume fstype="ext4" path="/dev/dm-1" mountpoint="~/slowstore" options="rw" />

then it nearly works. It prompts for the password (ok, I'd like pam_mount to do that for me, but still..) then I get:

pam_mount(rdconf2.c:126): checking sanity of luserconf volume record (/dev/dm-1)
pam_mount(rdconf2.c:132): user-defined volume (/dev/dm-1), volume not owned by user

If I do:

sudo chown nick:disk /dev/dm-1

Then re-login the encrypted partition mounts correctly (ignoring th fact I have to reneter the password). However, if I log out completely the ownership on /dev/dm-1 gets reset to root:disk.

What am I doing wrong?

© Server Fault or respective owner

Related posts about permissions

Mailman Error / Cpanel

as seen on Server Fault - Search for 'Server Fault'
Mailman is giving off this error when any changes are made to the list: ======================= Bug in Mailman version 2.1.14 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly… >>> More
NTFS Permissions - Correct combinations of special access permissions

as seen on Server Fault - Search for 'Server Fault'
What would be the correct combination of NTFS special access permissions to allow an AD group (Authenticated Users) to copy files to a share, but after copying no one in the AD group should be allowed to edit, overwrite, rename, or delete the file? The AD group should also be able to copy files from… >>> More
FTP, permissions: I cannot see permissions but I can change them

as seen on Super User - Search for 'Super User'
hi, I'm browsing a server with my ftp client. When I try to get the information about a folder, I cannot see the permissions (all rwx checkboxes are uncecked). If i try to check one of it, the opeartion is succesfull (I don't get any error), but then when I come back it is again unchecked. What… >>> More
Snow Leopard doesn't repair permissions, despite showing / saying its fixed them?

as seen on Super User - Search for 'Super User'
Sometime ago, I used carbon copy as I was replacing my hard drive in my Mac Mini running Snow Leopard. Afterwards, on my new drive I had some permission problems. I've tried several times running a repair permissions / repair disk from disk util. It shows that there are problems and I think it says… >>> More
IIS Permissions or NTFS Permissions?

as seen on Pro Webmasters - Search for 'Pro Webmasters'
I currently have a Windows Server 2003 setup to serve multiple sites via IIS. One of our directories needs to allow access to only 1 specific AD Security Group. I know there are two ways to accomplish this. One is using IIS to add permissions and the other is to set permissions on the folder/directory… >>> More

Related posts about mount

12.10 update breaks NFS mount

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've just upgraded to the latest 12.10 beta. Rebooted twice. The problem is with the NFS folders not mounting, here's a verbose log. # mount -v myserver:/nfs_shared/tools /tools/ mount: no type was given - I'll assume nfs because of the colon mount.nfs: timeout set for Mon Oct 1 11:42:28 2012 mount… >>> More
Mount SMB / AFP 13.10

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I cannot seem to get Ubuntu to mount a mac share via SMB or AFP. I've tried the following... AFP: apt-get install afpfs-ng-utils mount_afp afp://user:password@localip/share /mnt/share Error given: "Could not connect, never got a reponse to getstatus, Connection timed out". Which is odd as I can… >>> More
Mount Return Code for CIFS mount

as seen on Server Fault - Search for 'Server Fault'
When I run the following command (as root or via sudo) from a bash script I get an exit status (or return code in mount man page parlance) of 1: mount -v -t cifs //nasbox/volume /tmpdir/ --verbose -o credentials=/root/cifsid & /tmp/mylog It outputs the following into the myflog file: parsing… >>> More
Disable raid member check upon mount to mount damaged nvidia raid1 member

as seen on Server Fault - Search for 'Server Fault'
Hi, A friend of mine destroyed his Nvidia RAID1 array somehow and in trying to fix it, he ended up with a non-working array. Because of the RAID metadata, the actual disk data was stored at an offset from the beginning. I was able to identify this offset with dd and a hexeditor and then I used losetup… >>> More
Network shares do not mount.

as seen on Super User - Search for 'Super User'
My network shares were mounting fine yesterday.. suddenly they are not. They were mounting fine for the last two weeks or however long since I added them. When I run sudo mount -a I get the following error: topsy@monolyth:~$ sudo mount -a mount error(12): Cannot allocate memory Refer to the mount… >>> More