Been using fedora for a few years now, got a boot error this morning I just have no idea were to start looking. Got a luks encrypted root, getting the following after entering pass-phrase:
...
Starting Stdio Syslog Bridge.
Starting /dev/cgroup failed, see 'systemctl status dev-cgroup.mount' for details.
[code]....
Some of your private key files are encrypted for security reasons. In order to read them you have to provide us with the pass phrases. Server your.server.com:55 (RSA)
Enter pass phrase:
Server www.blahblahblah.com:55(RSA)
Enter pass phrase:
How to login ?
The cursor is blinking but I am unable to enter the pass phrase; the only thing I can do is press the power button to shutdown. Even if I leave the PC running for a hour I can't type anything.
I know how to resolve the problem if I am able to login.
I was trying to set my wireless to start up when the computer is booted like the regular ethernet eth0 but I can't figure out how to set the WPA pass phrase with system-config-network
View 2 Replies View RelatedIs it complete unsafe to have a ssh key with out pass phrase ?
View 4 Replies View RelatedI'm having trouble trying to generate an SSL server key WITHOUT a pass phrase.
Here's what I did. Wrong, obviously.
Code:
I'm using ssh key based authentication and I was pleased to find that when I set it up out of the box when I connected to my ssh server it prompted me with a password window rather than typing into the terminal and it remembered the pass phrase from one connection to the next.
For some reason it's stopped showing me the window, instead I'm logging in through the terminal, and it's stopped remembering my pass phrase between connections. since I don't know what the program was called that gave me the login box it's rather hard to search for.
want key based so i dont have to put in the password of user or passphraseI have edited the ssh_configfrom #Protocol 2, 1 to Protocol 2 with out the #I have edited the sshd_configPermitRootLogin yes to PermitRootLogin no#PasswordAuthentication no to PasswordAuthentication noi have the same file changes on the other 2 computers. I have 3 computer all together 1 xbuntu and the other 2 are ubuntu. All have the authorized_keys with chmod 400 persmissons id_dsa.pub and known_host fileone has id_dsa and it will not talk to the other computer either
aceraspire@momacer:~$ ls -l .ssh
total 16
-r-------- 1 aceraspire aceraspire 605 2010-03-25 11:21 authorized_keys
[code]....
I just installed CentOS 5.4 (x86_64) and I encrypted my /home /var /tmp and /mnt/Storage partitions, along with my swap partition. My only complaint is that when I boot, I have to enter my password 4 times, and I did not pick a short password. The password is the same for all 4 partitions. Is there anyway I can set things up so I can just type my password once? Once I get everything set up, I won't be booting that often, but right now it is a PIA.
View 2 Replies View RelatedI am using fedora 12.I have two internal drives. Both are ntfs. Whenever i click on them it prompts to enter root password. But i want to mount them as normal user without entering any root password. How can i disable it so that i am not asked to enter root password everytime i mount the drives.
View 2 Replies View RelatedEver since I started using KDE as in 4.2, I have been doing this regularly. When I startup KDE, I open Dolphin and click and mount each partition with root pass. I thought it might be some KDE issue as is the ever developing code and will be fine in future updates. But now I'm in 4.2.1 and it still exists. Upon inquiring fellow users on other distros, I have come to believe this is a *Fedora only* issue now. [URL].
View 8 Replies View RelatedAfter my cloning problems this morning were resolved, I have been able to complete conversion of the clone to run from an encrypted root partition. However, I have been unable to enable selinux when running from the encrypted root. /etc/selinux/config contains the settings that work on my unencrypted system
SELINUX=enforcing
SELINUXTYPE=targeted
and it is not disabled from the grub bootline, but the encrypted system always comes up with selinux disabled. Attempting to enable it with the command setenforce 1 fails, and to add insult to injury, the selinux administration-gui shows that it is enabled and enforcing. The cloned, now encrypted, system was cloned via rsync -aHXv, so the selinux contexts/attributes have been maintained as near as I can tell. I did have to disable selinux while performing the rsync of the /selinux directory in order to get it to copy and I am wondering if there was still some issue with this method.
I know some of you are running from encrypted root fs's and was wondering: Do you have selinux enabled and is it functioning properly? Any suggestions as to how I might jumpstart it or force it to run? Maybe I should boot into the system and uninstalling/reinstalling selinux?
I'm looking for a way of mounting an encrypted volume - home folder or a separate mount point, using only the standard login authentication (ie KDM or ssh). I thought the pam_mount module provided this, but I still get prompted for a password on the console at boot time. This is inconvenient as both my main desktops are headless HTPCs. I want the login credentials to be passed through, at log in time. I'm guessing this is possible, but to be honest, encryption is one thing in Linux that still completely confuses me.
View 1 Replies View RelatedI keep my /boot partition on a usb stick, where i keep the keyfile as well. I already generated the keyfile and added it to the LUKS LVM partition.Right now, on bootup I get a nice GUI to enter my 40 character password which is nice but a little tedious What do i need to modify for the system to automatically unlock the partition with the keyfile that is stored on the /boot partition
View 4 Replies View RelatedWhenever I am prompted to enter the root password, typical example would be in 'Power Management' clicking the button 'Make Default', pressing ENTER or clicking AUTHENTICATE doesn't close the box. To get passed this I have to press ALT+F4 and it continues which I'm assuming still does authenticate.
View 2 Replies View RelatedI like to do a minimal install, and then run some of my own scripts to install the rest of the packages I need, so to keep a lean system. When installing F14 with a partitioning scheme as follows:
Code:
/boot - 500MB
LVM
- swap - 2048 MB
- / - 15GB
- /home - Rest of file system - Encrypted
Everything works fine and the encryption works with no problem. However, as a friend pointed out to me, if you partition as follows:
Code:
/boot - 100MB/ - Rest of filesystem - Encrypted You are not able to boot the system when doing a minimal install. Meaning: you get up to the point to where you need to enter your password to decrypt the filesystem, and then nothing but..., well, nothing. However, and here it gets interesting, if you use the same partition layout, and you install the "Graphical Desktop", everything works fine. As I can not understand why this happens, I am currently testing a partition setup like so:
Code:
/boot - 100MB
LVM - Encrypted
- / - Rest of filesystem
Just to see if that works.
Anyhow: to make a long story short: It seems that the minimal install "forgets" to add some packages which are needed to decrypt the filesystem. Does anyone know which package this could be or why this occurs, so it can be added as part of the minimal install?
Anyone had any experience with unlocking a LUKS encrypted root partition via ssh? It is ok to leave /boot unencrypted.
There are a few pages from google with the debians variants, archived by putting dropbear into initrd.
I like to do that with my fedora/centos remote servers, but struggle to find any resources specific to it. Anyone has any suggestions and thoughts as to what might be a suitable way forward?
in ubuntu 10.04 how to get into single user mode with out entering the root user password
View 1 Replies View RelatedI have stop using debian some months but I decide to come back. Yesterday I have make a clean install of debian squeeze. The network manager never rember my wireles password. Every time I open the pc it ask me the keyring password and the wireles password. Why network manager can't rember my passwords? Also I have a strange problem when I try to gain root acces. If I try to open synaptic or to mount a ntfs partion it ask me the root password but every time I type my root pass it says that its incorrect but I am absolutely sure that I type my root pass correct. Also if I try to gain root acces from terminal with su its became the same thing but after some tries it takes my pass as corect. So every time I type my root pass from a gui like gksu it always says that is incorect but if I type my pass in terminal it take it correct after some tries. In the past I have again installed the debian from the same cd on the same pc but I had never those problems. What can be wrong?
View 6 Replies View RelatedSu <pass here> then enter
I get;
su: Authentication failure
It's not the wrong pass, i even changed it.
I lost my root .bash_profile. Have anyone, the .bash_profile contents of root to pass me?
View 3 Replies View RelatedI try to encrypt root file system on Opensuse 11.1 and I have found up to two possibilities.
1. [url]
2. [url]
In the first case, i have a Problem with entering password, for each partition on encrypted disk, i must enter my password.(For 3 partition 3 times)
And in the second version to get i nowhere.
Code:
I am trying to get Slackware 12.2 running on a system with two identical harddiscs using RAID-1, LVM and LUKS.
Here is what I get:
Code:
The system is still the same, however, the results of upgrading or installing 12.2 are different. The system refuses to boot. The screen messages during boot seem to suggest, that the RAID system is "seen" by the system, but the encrypted filesystem is not.
I can boot with the installation DVD, however, and
Code:
Can't start Ubuntu, stops after first password. I can access files on my encrypted partitions with LiveCD but I wonder if I can install Ubuntu and still have access to the encrypted drives as I can with LiveCD?
View 1 Replies View RelatedOpenSuSE 11.1 is by far the best SuSE version in a long time. It's generally up to competition or ahead of it. It's admirable, how thoughtful this system is set up, and how clean and fast it is compared to its predecessors. It ssems, that SuSE is fighting its way back to where they came from before the Novell "merger."
Having said that, it is even harder to understand, IMHO, why the installer doesn't support encrypted root partitions. Of course, there is a manual solution:
http://en.opensuse.org/Encrypted_Roo...ith_SUSE_HOWTO
However, this HOW-TO doesn't explain how to combine LUKS encryption with LVM on a RAID-1 system, as described for Slackware 12.2 here:
[url]
[url]
Is there a similar guide anywhere available for OpenSuSE 11.1?
If not: Would it be possible to do all the low-level setup work, like partitioning, setting up the logical volumes and encrypting everything, with Slackware, following the document above, and then install OpenSuSE 11.1 on that system? Would that work?
there is a way to mount, encrypted partitions as a normal user and not as root so that i may copy files into it using the file manager itself? even in the case of normal partitions other than /home, i can't seem add any data in them. the mount points i used are seperate directories within the /home partition?? also, is there a way to create partitions in such a way that it can be accessed, just as how windows partitions are accessed in linux?
View 9 Replies View RelatedRecently set up root encryption with a couple of LVM volumes inside one LUKS volume, and I am just a little confused as to how I would go about getting it to automatically unlock using a keyfile stored on a USB flash drive, I presume I would have to put the drive in the fstab inside my initramfs (if there is one), and add a hook for USB device support.
But I digress, essentially, I want to know what I have to do to enable my LUKS volume (containing all of my partitions sans /boot) to unlock using a keyfile stored on a USB flash drive, rather than a manually entered passphrase.
I'm a long time user of Debian, but I'm having trouble with my partitioning process. Here is where I currently stand:
I am installing the latest Wheezy build. I am trying to install debian with an encrypted LVM that spans two hard disks.
My partitioning layout is as:
1. /home
2. /root
3. swap
4. /boot
I then added partitions 1, 2 and 3 to a physical volume group. I then took that physical volume group and added it to a logical volume. Then I encrypted the logical volume, leaving the /boot partition untouched. I was under the assumption that the only partition the system needed free to reach the loading of the LVM is the /boot partition, as it holds the files necessary for booting. But when I attempt to finalize the disk, it gives an error stating, "No root file system detected". That would be an issue as it is currently sitting inside the encrypted LV. Am I wrong in including the root partition in the encrypted LV?
What is the best way of having as little of my file system non-encrypted as possible while still allowing a proper boot?
Centos 5.3 includes Ext4 and improved support for encrypted file systems but it appears to be aimed at laptop/desktop systems, in that a password must be entered at boot time.
Is it possible to have a server with an encrypted root file system boot up without entering a password?
Mandos will do it...
http://wiki.fukt.bsnet.se/wiki/Mandos
...by serving up the password from another server...
http://packages.debian.org/squeeze/mandos
...to a client loaded into the initial RAM disk environment...
http://packages.debian.org/squeeze/mandos-client
...but it's not available on CentOS, and is only in Debian unstable.
Is there a similar (or any) solution for CentOS?
In particular, I'm envisaging encrypted virtual machines being served passwords from their virtual host.
Alternatively, the data that *really* needs to be protected could be encrypted while the system core remains unencrypted. But then the keys to decrypt the file system must be stored in the unencrypted portion, so this is not an effective method.
I created a key for an ssl site with a passphrase. Worked really well and enjoyed doing it. I then shut down the lpatop and drove back to my parents for easter...
Now Fedora won't fully boot, and I'm just have the line that creeps along the bootom. I've tried a few things, but not having any joy. I obviously need to enter this passphrase, but how should I do this?
Do I go out any get some CD's to make a boot disk? Or is there a way to disable the graphical boot options from grub?
I have tried many different ways to interact with the mysql to reset the root mysql pass. This is what I got to right now
Code:
#!/bin/sh
newpass=$1
service mysqld stop
mysqld_safe --skip-grant-tables --skip-networking &
echo "use mysql;" >> /tmp/mysql_pass_reset.txt
echo "update user set password=PASSWORD("$newpass") where User="root";" >> /tmp/mysql_pass_reset.txt
[Code]...