[Filesystems-devel] Bug#765006: ecryptfs-utils: Install of ecryptfs-utils changes PAM config which breaks Exim authentication

[Marcel van Beurden]

Package: ecryptfs-utils
Severity: important

Dear Maintainer,

I installed ecryptfs-utils. This modified the files in /etc/pam.d/ by
adding the line:
session        optional        pam_ecryptfs.so unwrap

Somehow this line broke unix authentication that is used by Exim. This
caused that I couldn't send mail anymore since the mailserver would
not accept mail. Unfortunately it made my mail client time out and
made Exim hang without error in the log and leaving me totally
clueless on why suddenly Thunderbird/Exim stopped working.

Starting Exim in debug mode showed that its last action was calling
PAM. That made me check out /etc/pam.d/ and thanks to etckeeper I
could figure out what had changed, which pointed me to ecryptfs.
Uninstalling the package fixed my problem.

-- System Information:
Debian Release: 7.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.utf8)
Shell: /bin/sh linked to /bin/dash

Versions of packages ecryptfs-utils depends on:
ii  gettext-base    0.18.1.1-9
pn  keyutils        <none>
ii  libc6           2.13-38+deb7u4
ii  libecryptfs0    99-1
ii  libgpg-error0   1.10-3.1
ii  libgpgme11      1.2.0-1.4+deb7u1
ii  libkeyutils1    1.5.5-3
ii  libnss3-1d      2:3.14.5-1+deb7u2
ii  libpam-runtime  1.1.3-7.1
ii  libpam0g        1.1.3-7.1
pn  libtspi1        <none>

ecryptfs-utils recommends no packages.

Versions of packages ecryptfs-utils suggests:
pn  cryptsetup  <none>