4

I'm puzzled.

As far as I understand it, the user folder /home/user is encrypted with the users password. Connecting through smb to the computer does somehow decrypt the user's folder. How is this done? SMB doesn't transfer the password normally.

Also, I'm trying to achieve something similar using pam_mount, but there are some limitations. What software does ubuntu use to mount its encrypted file systems?

2 Answers 2

4

If you're meaning the eCryptfs home directory encryption, then the reason it is available is because the kernel keeps the user's home directory encryption key in memory for as long as the user is logged in (as defined by a PAM "session"). Specifically, the software that handles this is pam_ecryptfs. See its use in /etc/pam.d/common-*.

3
  • That's what I mean. But... where does the encryption key get passed to the kernel? Samba doesn't send the password over the network. Commented Oct 31, 2010 at 17:48
  • The eCryptfs mount will only be available if the user has already authenticated to PAM on the system. So, either they are already logged in, or Samba has been configured to use PAM (in which case the password is being sent over the network in some way).
    – Kees Cook
    Commented Oct 31, 2010 at 17:54
  • Actually you were right. I must have left open an SSH session that I missed. After rebooting it didn't work anymore. Thanks for your help! Commented Oct 31, 2010 at 18:33
1

Actually I was wrong. I forgot to close an SSH session, of course the home folder was still decrypted.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .