helpdavfs2 - Support: sr #109048, webdav password crypted

 
 

sr #109048: webdav password crypted

Submitted by:  Souvarine <souvarine1234>
Submitted on:  Tue May 24 18:19:25 2016  
 
Category: NonePriority: 5 - Normal
Severity: 2 - MinorStatus: In Progress
Privacy: PublicAssigned to: Werner Baumann <wbaumann>
Open/Closed: OpenOperating System: GNU/Linux

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sat May 28 08:36:25 2016, comment #4:

hey,

I use pam_mount. with the following definition in /etc/security/pam_mount.conf. username and password on the client have to match username and client on the webdav server. on login the credentials get parsed to the server and the share gets mountet.

<volume fstype="davfs" options="username=%(USER),nodev,nosuid,noexec,uid=%(USER),gid=%(USER),dir_mode=0700,file_mode=0700,_netdev"
path="https://192.168.1.1/data/" mountpoint="/mnt/data" >
</not><not><user>root</user></not><not><user>lightdm</user></not></volume>

this is normally done for every user, so you have to exclude the users you don't want to mount shares e. g. root or the user the login manager uses (lightdm in this case). some of my options are redundant due to defaults (if I remember correctly e. g. noexec). plz. read the man pages for further explanation.

Anonymous
Thu May 26 18:04:08 2016, comment #3:

pam_mount will pass the password to mount.davfs through a pipe. But of course pam_mount needs to get the password somehow.
As I understand pam_mount usually uses your login password or it will prompt you for the password. Please consult the pam_mount manual for definite information (I don't use pam_mount).

Werner

Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Thu May 26 15:17:17 2016, comment #2:

I read that there is a way to automatically mount the webdav share with pam_mount. That's why there is the "username" option for davfs2. This way , there is no password stored, is it correct??

Souvarine <souvarine1234>
Wed May 25 07:42:31 2016, comment #1:

What I don't understand:
You want to automatically mount the file system. So you don't want to type in any secret for mounting.
If your WebDAV password is encrypted, how does the program get the secret that is needed to decrypt the password?

If you want to mount automatically then the secret needed for WebDAV must be stored somewhere on your comp√ľuter in a way a program can get it without user intervention. Why not store it in a file that is only readable by root?
How would you like to store the secret and how would davfs2 be able to get it?

If you want your password to be stored encrypted you can make /etc/davfs2 an encrypted file system. But of course the password for this encrypted file system must be available at boot time in order to be able to read the files. But I can't see any security advantage.

Werner

Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Tue May 24 18:19:25 2016, original submission:

Hi,

I want my system to automatically mount a webdav server at start. I use the /etc/davfs/secret file to store the webdav login and password. But I don't want the password to be stored in plain text for security reason.

Is there a way to store the Webdav password not in plain text but crypted?

Thanks

Souvarine <souvarine1234>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by wbaumann (Posted a comment)
  • -unavailable- added by souvarine1234 (Submitted the item)
  • -unavailable- added by souvarine1234
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Wed May 25 07:42:31 2016wbaumannStatusNone=>In Progress
      Assigned toNone=>wbaumann
    Tue May 24 18:19:25 2016souvarine1234Carbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup1