Re: Verify LUKS password

[Marcos Barbosa <marcosestevesbarbosa@xxxxxxxxx>]

Is more simple. Just use the same password configured on LUKS volume to unlock gnome-screensaver. I believe make a fast test: Get the password and try mount again the device. If no error ocurs then the password is correct. Close the second mount point and unlock screen. If password is incorrect then no unlock the screen. But the question is: How a make this with a beatiful way? or use a dirty script to do that?

2011/11/29 Arno Wagner <arno@xxxxxxxxxxx>

I am not clear on what you want to do: Use the LUKS passphrase
also for the Gnome screen-locker? If so, set one of the keyslots
to the passphrase of the screen-locker.

If you actually want to remove the LUKS mapping (i.e. "close" the
LUKS container) when the screen safer engages and remap the LUKS
container when the screensaver is unlocked, then this is complicated.
It mau also not be what you want, given that unmapping the LUKS
container with open files is eiter not possible or can result in
arbitrary data corruption (I have not tried it). So you would
need to do something like this on screenlocker-engage:

1. Determine all open files in the LUKS container
2. Terminate all applications that have these files open
3. Unmount the LUKS container and verify it did unmount.
  If unmount fails, go to 1. (An application could have opened
  a file in between...) Maybe you can also do a ro remount first.
4. Unmap the LUKS container.

Now, this would need to be somehow script-driven from the
screensaver. Whether automated application clsoe is a good idea
depends very much on the situation and is generally _not_ a good
idea.

Arno

On Tue, Nov 29, 2011 at 01:22:35PM -0200, Marcos Barbosa wrote:
> I have a problem: I need authenticate gnome-screensaver (via PAM) with LUKS
> password. How i do that?
>
> Best regards.
>
> --
> Marcos Barbosa <marcosestevesbarbosa@xxxxxxxxx>

> _______________________________________________
> dm-crypt mailing list
> dm-crypt@xxxxxxxx
> http://www.saout.de/mailman/listinfo/dm-crypt


--
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno@xxxxxxxxxxx
GnuPG:  ID: 1E25338F  FP: 0C30 5782 9D93 F785 E79C  0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans

If it's in the news, don't worry about it.  The very definition of
"news" is "something that hardly ever happens." -- Bruce Schneier
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt

-- 
Marcos Barbosa <marcosestevesbarbosa@xxxxxxxxx>
_______________________________________________
dm-crypt mailing list
dm-crypt@xxxxxxxx
http://www.saout.de/mailman/listinfo/dm-crypt