[Filesystems-devel] Bug#765006: ecryptfs-utils: Install of ecryptfs-utils changes PAM config which breaks Exim authentication

Marcel van Beurden marcel_debianreportbug at datkan.net
Sun Oct 12 21:44:42 UTC 2014

Package: ecryptfs-utils
Severity: important

Dear Maintainer,

I installed ecryptfs-utils. This modified the files in /etc/pam.d/ by
adding the line:
session        optional        pam_ecryptfs.so unwrap

Somehow this line broke unix authentication that is used by Exim. This
caused that I couldn't send mail anymore since the mailserver would
not accept mail. Unfortunately it made my mail client time out and
made Exim hang without error in the log and leaving me totally
clueless on why suddenly Thunderbird/Exim stopped working.

Starting Exim in debug mode showed that its last action was calling
PAM. That made me check out /etc/pam.d/ and thanks to etckeeper I
could figure out what had changed, which pointed me to ecryptfs.
Uninstalling the package fixed my problem.

-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.utf8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ecryptfs-utils depends on:
ii  gettext-base
pn  keyutils        <none>
ii  libc6           2.13-38+deb7u4
ii  libecryptfs0    99-1
ii  libgpg-error0   1.10-3.1
ii  libgpgme11      1.2.0-1.4+deb7u1
ii  libkeyutils1    1.5.5-3
ii  libnss3-1d      2:3.14.5-1+deb7u2
ii  libpam-runtime  1.1.3-7.1
ii  libpam0g        1.1.3-7.1
pn  libtspi1        <none>

ecryptfs-utils recommends no packages.

Versions of packages ecryptfs-utils suggests:
pn  cryptsetup  <none>

More information about the Filesystems-devel mailing list