pam_mount 错误“crypt_activate_by_passphrase:不允许操作”

gat*_*ado 5 opensuse luks pam-mount

我正在尝试在 OpenSuSE 上设置加密的主目录。

对于直接登录,一切正常,但我希望主目录也通过安装ssh。当我尝试访问ssh机器并提供密码时,以下内容显示在/var/log/messages.

Sep 20 16:03:16 linux-bd9o sshd[11921]: Accepted keyboard-interactive/pam for test from ::1 port 37227 ssh2
Sep 20 16:03:16 linux-bd9o sshd[11921]: pam_mount(pam_mount.c:172): conv->conv(...): Conversation error
Sep 20 16:03:16 linux-bd9o sshd[11921]: pam_mount(pam_mount.c:476): warning: could not obtain password interactively either
Sep 20 16:03:16 linux-bd9o sshd[11921]: pam_mount(mount.c:65): Messages from underlying mount program:
Sep 20 16:03:16 linux-bd9o sshd[11921]: pam_mount(mount.c:69): NOTE: mount.crypt does not support utab (systems with no mtab or read-only mtab) yet. This means that you will temporarily need to call umount.crypt(8) rather than umount(8) to get crypto volumes unmounted.
Sep 20 16:03:16 linux-bd9o sshd[11921]: pam_mount(mount.c:69): /usr/sbin/mount.crypt: dmcrypt cipher ignored for LUKS volumes
Sep 20 16:03:17 linux-bd9o sshd[11921]: pam_mount(mount.c:69): crypt_activate_by_passphrase: Operation not permitted
Sep 20 16:03:17 linux-bd9o sshd[11921]: pam_mount(pam_mount.c:521): mount of /home/test.img failed
Run Code Online (Sandbox Code Playgroud)

crypt_activate_by_passphrase: Operation not permitted当我尝试运行时出现相同的错误

cd /home
mount test.img test
Run Code Online (Sandbox Code Playgroud)

为了澄清,我想先修复错误,因为我也许可以至少遵循给出的SSH食谱这个姐姐的问题,如果不修改/etc/pam.d/sshd。无法通过命令行挂载很烦人。

关键在CBC。我使用这些说明重新编码,但行为是相同的 - 本地登录有效,SSH 或命令行mount失败。(奇怪的是,八进制转储确实发生了变化,也许有随机信息可以防止键中的表查找。)