helpdavfs2 - Support: sr #109048, webdav password crypted


sr #109048: webdav password crypted

Submitted by:  Souvarine <souvarine1234>
Submitted on:  Tue 24 May 2016 06:19:25 PM UTC  
Category:  None Priority:  5 - Normal
Severity:  2 - Minor Status:  In Progress
Privacy:  Public Assigned to:  Werner Baumann <wbaumann>
Open/Closed:  Open Operating System:  GNU/Linux

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Sat 28 May 2016 08:36:25 AM UTC, comment #4: 


I use pam_mount. with the following definition in /etc/security/pam_mount.conf. username and password on the client have to match username and client on the webdav server. on login the credentials get parsed to the server and the share gets mountet.

<volume  fstype="davfs" options="username=%(USER),nodev,nosuid,noexec,uid=%(USER),gid=%(USER),dir_mode=0700,file_mode=0700,_netdev"
        path="" mountpoint="/mnt/data" >

this is normally done for every user, so you have to exclude the users you don't want to mount shares e. g. root or the user the login manager uses (lightdm in this case). some of my options are redundant due to defaults (if I remember correctly e. g. noexec). plz. read the man pages for further explanation.

Thu 26 May 2016 06:04:08 PM UTC, comment #3: 

pam_mount will pass the password to mount.davfs through a pipe. But of course pam_mount needs to get the password somehow.
As I understand pam_mount usually uses your login password or it will prompt you for the password. Please consult the pam_mount manual for definite information (I don't use pam_mount).


Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Thu 26 May 2016 03:17:17 PM UTC, comment #2: 

I read that there is a way to automatically mount the webdav share with pam_mount. That's why there is the "username" option for davfs2. This way , there is no password stored, is it correct??

Souvarine <souvarine1234>
Wed 25 May 2016 07:42:31 AM UTC, comment #1: 

What I don't understand:
You want to automatically mount the file system. So you don't want to type in any secret for mounting.
If your WebDAV password is encrypted, how does the program get the secret that is needed to decrypt the password?

If you want to mount automatically then the secret needed for WebDAV must be stored somewhere on your comp√ľuter in a way a program can get it without user intervention. Why not store it in a file that is only readable by root?
How would you like to store the secret and how would davfs2 be able to get it?

If you want your password to be stored encrypted you can make /etc/davfs2 an encrypted file system. But of course the password for this encrypted file system must be available at boot time in order to be able to read the files. But I can't see any security advantage.


Werner Baumann <wbaumann>
Project AdministratorIn charge of this item.
Tue 24 May 2016 06:19:25 PM UTC, original submission:  


I want my system to automatically mount a webdav server at start. I use the /etc/davfs/secret file to store the webdav login and password. But I don't want the password to be stored in plain text for security reason.

Is there a way to store the Webdav password not in plain text but crypted?


Souvarine <souvarine1234>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by wbaumann (Posted a comment)
  • -email is unavailable- added by souvarine1234 (Submitted the item)
  • -email is unavailable- added by souvarine1234

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-05-25 wbaumann StatusNone => In Progress
        Assigned toNone => wbaumann
    2016-05-24 souvarine1234 Carbon-Copy- => Added

    Back to the top

    Powered by Savane 3.5