Software :: EncFS Failure - NFS Export Of A Reverse Encfs Mount
Apr 21, 2011
I have an NFS share hosted at a file server for several machines. I set up an encfs encrypted file tree in this. First, I created a directory in the NFS mounted tree where I wanted the encrypted files to be store (/home/nfs/phil/private). Second, I created a mount point where I wanted to access those files in the clear view (/home/phil/nfs-phil-private). Third I mounted encfs with the simple command "encfs /home/nfs/phil/private /phil/nfs-phil-private". During this mounting, it asked me for a pass phrase to encrypt the files with. Fourth, I copied some files into "/phil/nfs-phil-private". I saw that files with cryptic names were created in "/home/nfs/phil/private", along with a file named ".encfs6.xml".
That was on one machine named "lorentz". Then I switched to another machine named "euler". I created the same mount point here (/home/phil/nfs-phil-private). I verified that /home/nfs/phil/private already existed, as did "/home/nfs/phil/private.encfs6.xml". So I tried the same "encfs /home/nfs/phil/private /phil/nfs-phil-private" command. This time it failed. Here is all the output up to the first prompt:
Code:
15:05:23 (FileUtils.cpp:375) Archive exception: stream error
15:05:23 (FileUtils.cpp:326) Found config file /home/nfs/phil/private/.encfs6.xml, but failed to load
Creating new encrypted volume.
[code]....
The first two lines certainly appear to be some kind of error. I can cat the .encfs6.xml files just fine, so I do have permission to read it. It had not even prompted me for a password, yet. Anyone know what the deadl with this is? A possible cause is that the first encfs is version 1.6.1 (ubuntu 10.10 packaged as 1.6.1-1) and the second encfs is version 1.5.2 (ubuntu 9.10 packaged as 1.5.2-1).
View 2 Replies
ADVERTISEMENT
Feb 17, 2011
I have two computers on my network, both are running Ubuntu 10.10. I wish to access encfs-encrypted directories on a remote computer from my local computer. I used nfs to mount the remote encrypted directory onto my local machine, and then I used encfs to decrypt. But because of nfs' use of some UID-type ownership convention rather than user:group, I have no access to the directory I just mounted.I want my local machine's software to access the files, so ssh login is probably not a solution, and I would like to avoid using encfs' --public option if possible.
View 2 Replies
View Related
Jun 15, 2011
Whenever I mount a encfs directory to a regular directory, the regular directory disappears. this is the command I use
encfs ~/encrypted ~/plain
When I try to access the folder from my windows computer, I can not see it. What to do?
View 2 Replies
View Related
Mar 25, 2010
There are some encfs folders with private data on the server and all data is exported via nfs to all other omputers in the house.I can mount the encfs folders on another computer (using encfs command) to work with the data, but I never dared to mount it on more than one computer simultaniously, because I fear the encrypted data might get corrupted if more than one computer mount and access it at the same time.
So I want to ask about your experience: Is it safe to mount an encfs folder on several computers at the same time? All computers use "hard" and "sync" as nfs mount options to minimize risks of data loss. But can I access the folders simultaniously, or do I risk corrupting the encfs encryption and lose everything?
View 2 Replies
View Related
Jun 30, 2011
my os is opensuse 11.4. I tried k-encfs, but failed. Running the .rpm file said successfully installed, but I cant find the program and running the 'install' script gives me another error message.
View 4 Replies
View Related
Apr 13, 2011
I am trying to get Encfs working on Ubuntu 10.10 with only partial success. I am using the Ubuntu package which is version 1.6.1. I am also trying to build 1.7.4 source on Ubuntu 10.10 which is failing.
First the problem with the Ubuntu package, which I realize may be fixed in 1.7.4. I am mounting a clear directory with the --reverse option to have an encrypted view of this data. This so far works, although I do not know if it really works correctly. I used rsync to copy all the encrypted data to a third directory outside of this first mounting. Then I do a second mounting (without --reverse) using that copy as the source, to make a mountpoint with a clear view of the copied encrypted files. This fails as no files show up at all.
I am doing it this way because my intended first use for Encfs is to copy an encrypted view of a local physically secured backup directory containing clear data to another remote machine where sometimes it is not physically secure. Transfer is by ssh over rsync, but that is not sufficient security for the remote machine. So the role of Encfs is to be sure the data is never in a clear state on that machine when the machine is not attended. This location is the home of the owner of the company who is not always at home. The machine is, in theory, at risk for theft when no one is at home (this is the risk we want to address). The owner will personally have the Encfs password, and may need access to some of these files. So it would be treated as an encrypted store and Encfs would be used to view it in the clear by manually mounting it that way (e.g. not with --reverse).
I am doing the test entirely on my desktop at the moment, as described above. I am using a script to carry out the entire setup of my tests, so it is fully reproducible, and that configuration can be incrementally changed as desired. I have a suspicion that certain messages resulting from the setup may indicate the problem. This is from the first mount with --reverse:
Code:
Creating new encrypted volume.
Standard configuration selected.
--reverse specified, not using unique/chained IV
Configuration finished. The filesystem to be created has
the following properties:
[Code]...
View 6 Replies
View Related
Feb 24, 2010
I could not find details of what CryptKeeper was doing and I worked this out. It shows how to open and close CryptKeeper files using encfs form the command line. I hope this helps others.
Ubuntu karmic 9.10. CryptKeeper 0.9.4-1 encfs 0.5.2-1ubuntu1 also works in Mint8. Tom Morton author of CryptKeeper site: [url]
How Gnome Cryptkeeper works with encfs
In CryptKeeper create a new encrypted folder:
The directory above is created and also another hidden one called: /home/ian/.aaaaaaxxxxTestCryptKeeper_encfs which contains one hidden file called .encfs6.xml. As you create additional folder and files in the /home/ian/aaaaaaxxxxTestCryptKeeper additional folders and files with encrypted names are created in /home/ian/aaaaaaxxxxTestCryptKeeper 4L9KBI4IeoAKOoZ,IwzVyn2VPGysXt-JCbStUej5Ewnn90. These mirror any files and folders which you create in the encrypted directory except that there names and contents are totally encrypted.
The above CryptKeeper directory can be created anywhere within the Linux file system, for example, on another partition. In each case two directories are created within the parent (in this example /home/ian/), one with the original directory name, the other preceeded with a "." and followed by "_encfs".
How to open a directory created with CryptKeeper using encfs.
Provided you copy the directory like .aaaaaaxxxxTestCryptKeeper_encfs and all its contents, it can be opened anywhere using the following command. (Note that full path names are needed.)
encfs /home/ian/.aaaaaaxxxxTestCryptKeeper_encfs /home/ian/aaaaaaxxxxTestCryptKeeper
The mount command will then show:
If /home/ian/.aaaaaaxxxxTestCryptKeeper_encfs does not exist you will asked if you wish to create it and you will be asked for a password twice. In this case it will not be in CryptKeeper unless you then import it.)
If it is a CryptKeeper file then it appears in CryptKeeper file list as opened and can be closed from there. To close from the command line type:
Note unmount will not work for these files.
View 1 Replies
View Related
Apr 29, 2010
Right, just a quick question about rsnapshot over sshfs and encfs. I've set up an encfs filesystem, and when mounted on the remote machine remotely:
Code:
touch foo.bar
Code:
cp -al foo.bar foo.car
Works as one would expect it to.
The same is true on the local machine (The EncFS has External IV chaining disabled). However, when the remote dir is sshfs mounted on my computer here, and then encfs'd to a decrypt mount on my computer, I can move files to it, and they go over the network and get encrypted, however:
Code:
cp -al <file> <file>
No longer works, I get 'not implemented' errors...
I thought since I don't have External IV chaining this shouldn't be an issue - I've tried without any of the file chaining options, again to no effect. All work remotely, or with both locally, but not over sshfs. Is this a quirk of sshfs?
View 1 Replies
View Related
Jun 19, 2011
Set up a few machines yesterday to test out some parallel code. Just for fun, I selected the "encrypt users files" option when setting up Ubuntu (10.10). I had never used the option in years past. Now I'm finding it a pain. EG., ssh requires me to already have a login to the machine before it will let me log in w/o a password (eg., using id_rsa.pub and authorized_keys).
Similarly, I have no reason to encrypt files on these machines. They're just crunching numbers. Is there an easy way to disable this? Or do I need to delete my original user and make another one (with all the su privelages, etc...) w/o an encrypted file system / home directory.
View 1 Replies
View Related
May 9, 2010
Just a warning / question about Encfs on Slackware current. I doesn't work due to the upgrade to boost 1.4.2. I ran encfs on an old install of 13.0 to get at my data, but I'd prefer to access it right from current. A big warning: if you try to access your encrypted data on current it will corrupt your encfs6.xml file and I don't know if it is recoverable (I had a backup of mine).
View 5 Replies
View Related
Jul 7, 2011
I'm running 11.04 (64 bit) get the following in my syslog
[Code]....
1) Why is this happening
2) How can it be fixed
3) How can it be avoided
View 3 Replies
View Related
Mar 8, 2010
I started up my machine this morning and entered my password to encfs as I do each day and was greeted with a message telling me my password was incorrect. I tried several times, checked caps lock but no joy.
The message (which I didn't copy and paste unfortunately) mentioned ssl and I remembered that openssl was one of the security patches I applied at the weekend. So I removepkg'd the two openssl packages (v0.9.8m) and then installpkg'd the original ones that came with slackware 13.0 (v0.9.8k).
View 4 Replies
View Related
Jun 7, 2011
I've been trying to share a folder with samba. This folder is the decrypted version of an encfs encrypted folder. Mounting the decrypted folder on the server is done automatically on login using gnome-encfs. Exposing the folder locally works like a charm. Now where I get stuck is trying to access the samba share from a client (even with smbclient on the server itself). I can see the share with smbclient -L:
tijm64@tijm64-HTPC:~$ smbclient -L 192.168.1.100
Enter tijm64's password:
Domain=[TIJM64] OS=[Unix] Server=[Samba 3.4.7]
[Code].....
View 1 Replies
View Related
Mar 2, 2010
[URL]
encfs: preserve timestamps on a shared encrypted folder?
View 1 Replies
View Related
Mar 3, 2010
I would like to create an encrypted folder which can be shared by users included in the users group.To do so I used encfs:
Code:
cd somewhere
sudo mkdir encrypted visible
sudo chown root:users encrypted visible
sudo chmod 770 encrypted visible
encfs /somewhere/encrypted /somewhere/visible -o allow_other -o umask='007' -o uid='0'
Now if a user (included in users) creates a new document in the visible folder, that will be
Quote:
-rwxrwx--- 1 root users 0 2010-03-02 14:19 new file
While I would like it to be
Quote:
-rwxrwx--- 1 user users 0 2010-03-02 14:19 new file
Mounting encfs without the option uid='0' gives same results with only difference that instead of root the owner is the user who mounted encfs. Also copying a file owned by different user rather than root goes to the same: for example having in my home a file like
Quote:
-rwxr-x--- 1 me users 0 2010-03-02 14:30 myfile
and trying to copy it to the encrypted shared folder with
Code:
sudo cp -a -v ~/myfile /somewhere/visible
will give something like
Quote:
cp: failed to preserve ownership for `~/myfile': Operation not permitted
And the copied file on the shared encrypted folder will be as usual:
Quote:
-rwxrwx--- 1 root users 0 2010-03-02 14:30 myfile
Is there a way to mount encfs in order to preserve ownership?
View 3 Replies
View Related
Mar 21, 2010
Is there a way for my home folder to not be automatically mounted when i log in? And for that matter a way to change the password from my log in password to something else?
View 2 Replies
View Related
Oct 20, 2010
I am running OpenSuSE 11.3. I cannot mount an export from a Redhat 9 NFS server.I am able to mount the export from RHEL5, Ubuntu, Fedora, Solaris but not OpenSuSE 11.3. This is the command I use from a Ubuntu Karmic box.
mount server:/exportdir /mnt -o vers=3,proto=udp
As I said it works from many other distros, but not sure why no go on this one. Can anyone explain this? Should I submit a bug? I noticed portmap is not used anymore and am wondering if thatmay have anything to do with it. The rpcbind is supposed to handle this from what I read..not sure if this is accurate.
View 4 Replies
View Related
Jan 16, 2011
I saw a post where you were faceing "Type s for swith or M or mannual restore"
I got the same message. I tried S but nthing happend then I tried M. it took me to root@ubuntu:/#
How i restore it manunally or if not possible I need to back up the data to pend drive
but i cant find the pendrive in the home section.
View 2 Replies
View Related
May 10, 2011
I am copying some backup files to a NAS by connecting an NFS export on the NAS to a mount point on my linus box. I then copy the files to it with a cron job that runs nightly. I have mounted the NAS to /mnt/nas. How can I test that the mount point is active before I copy to it? I wouldn't want to copy to /mnt/nas unless it was actually connected to the NAS.
View 9 Replies
View Related
Jun 12, 2010
seahorse export menu is always disabled. I need to export the passwords to restore it after formatting my machine.
View 1 Replies
View Related
Oct 12, 2009
I am using RHEL5. These are my config files:
Code:
options {
listen-on port 53 { 127.0.0.1; 192.168.14.54; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
[code]....
View 3 Replies
View Related
Dec 16, 2010
I'm using Ubuntu 10.10 x86_64, with 2T HDD x5 grouped as RAID5 using RAID controller (dell perc 6/i), result in a 8TB disk, and I put it to a single partition in XFS. Just now one light bulb went wrong and caused whole house power fail, sadly during that time I'm copying some data to that partition. After I clear the power issue and turn on the computer, the partition still can mount, so I continue copying, and that gives me some IO error. I assume it is some kind of problem that need a file system check, so I unmount it, and run xfs_repair.
However xfs_repair shows the partition has not been unmount so I restarted the computer. After restarting, during the loading screen the system prompt me that it cannot find the file system, and I pressed 'S' to skip (btw 'M' for manually maintenance, but I didn't try) Then there comes the problem: the partition cannot be mounted anymore. I tried using palimpsest (the disk utility) to check, the partition shows normally (i.e., there's a 8T disk with a single partition in XFS), but when I try to mount it, the first time I click 'mount' results in nothing, repeat click will get an error 'The device is busy: A job is pending on /dev/sdb1'.
Checking the process running I found this:
process 'mount', status 'uninterruptible', command line 'mount /dev/sdb1', waiting channel 'call_rwsem_down_write_failed'.
Also other operations with that partition does not work, such as xfs_repair or mount, will just halt (and the waiting channel is 'get_sb_bdev')
View 4 Replies
View Related
Jul 15, 2011
/etc/exports
Code:
/home/bludiescript/tv-shows 192.168.1.127(ro) 192.168.1.38(ro)
/home/bludiescript/shares 192.168.1.127(rw) 192.168.1.38(rw)
portmap
[code].....
ive been trying to setup nfs share across my network. i have 3 boxes one mac which uses samba to share to the 2 sabayon linux boxes which does work. however the 2 linux boxes cant share with each other or the mac. i have tried differnt variants of the export file such as 192.168.0.0/8, 192.168.1.0/24, *, sasquatcheian etc... after any change i execute etc/init.d/nfs and exportfs -ra, i have rebooted both computers several times. i setup reserved ip's on my routers lan setup page for each computer. 192.168.1.32 is my server 192.168.1.127 is my client along with 192.168.1.38 the mac.i disabled the firewall on the server and the client has no firewall.
View 1 Replies
View Related
Jul 17, 2010
My SD card is recognised by OS 11.3 if it is inserted at boot up. If I remove it and reinsert it, the devise monitor states 'no devices plugged in'. This is a problem that I have also had (and reported in these forums) with 11.0, 11.1, 11.2.Now I notice that there is a section for 'removable devices' in the system configuration. But even if I click the box 'enable automatic mounting of removable media' and the sub-box 'automatically mount removable media when attached' the SD card is not remounted, there remain 'no devices plugged in'.
View 9 Replies
View Related
Jan 14, 2010
Recently installed some minor software, some games and Ubuntu Tweak, I am not sure if that's what caused this issue or not. I shutdown after the installations, then when I tried to start back up the small, white ubuntu logo appears just like it normally does, then it just goes to a black screen. I turned off the computer and restarted in (Recovery Mode). It goes about its thing then it says it is waiting for root file system, then after about 30 seconds it says "Gave up waiting for Root File System" how to fix this without reinstalling?
View 2 Replies
View Related
May 9, 2011
I am on Mint8. Discovered that the error message was caused by the program thinking that the true date was 10 days ahead of the date that shows on the display. And the incorrect date goes right along, changing every 24 hrs, the true date never catching up. Short term solution was to set the date 1 yr ahead which then showed on the display. Long term (?) solution fsck eventually worked. We shall see how long.
View 1 Replies
View Related
Apr 7, 2011
I can select Ubuntu 10.10 OS from the grub menu, but it no longer loads? It scrolls through some lines, including mount failure and "No such file or directory." before halting below :
(initramfs)
The same happens when recovery is selected.
View 11 Replies
View Related
Mar 20, 2010
I am a newbie to linux and having a hard time installing drivers for my card (gtx 260). I'm following this guide: [URL]. So do you edit the grub.conf file in etc first and then do the yum install kmod-nvidia? I've gone through this a few times, and each time when I think I've followed the steps and reboot, I get nothing. A blinking white cursor once and then a bunch of texts saying failure to mount and sleeping forever another time.
View 2 Replies
View Related
May 27, 2011
I've spent some time searching for answers to this and I haven't found much at all.Please feel free to post pointers to other threads that discuss this particular problem, if you find any.The problem is that in bash I want to mount an iso file to inspect the contents with the command:Code:sudo mount myCD.iso CDMount -o loopThe command works fine, but pressing tab to complete either the iso filename or the CDMount directory does not work. The completion suggestions I get are existing mountpoints which The completion suggestions should include the files and directories in the current directory. This worked with Ubuntu 10.04 and not with 11.04.
View 1 Replies
View Related
Jul 22, 2010
I am using Ubuntu 10.04 on a dual-boot system with Windows 7. Yesterday I upgraded from 2.6.32-23 to 2.6.32-24. After that, pressing the shutdown button and selecting shutdown or restart (whether on the login page or after I've logged in) will only bring me back to the login page. I can shutdown or restart if I do sudo shutdown now, but I'd prefer to use the GUI. Also, there is no sound now (not a big deal, but still not good). And I can't access my storage partition (not the windows7 partition, but a third ntfs partition with data on it). I get the error message that I am unauthorized to mount. I have the only account on this computer, so I should be authorized. This one is a HUGE problem for me, because I need to be able to access my data for work. None of these were problems before the upgrade.
Oh yeah, and quickstart is not enabled. Also, if I go to Power Management, and try to alter what to do when Power Button is pressed, my only option is Ask Me. I know these have been problems/solutions to the shutdown/restart problem in the past.
View 9 Replies
View Related
