maindavfs2 - Support: sr #109048, webdav password crypted

 
 

sr #109048: webdav password crypted

Submitter:  Souvarine <souvarine1234>
Submitted:  Tue 24 May 2016 06:19:25 PM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  2 - Minor Status:  In Progress
Privacy:  Public Assigned to:  _71007
Open/Closed:  Closed Operating System:  GNU/Linux
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 28 May 2016 08:36:25 AM UTC, comment #4: 

hey,

I use pam_mount. with the following definition in /etc/security/pam_mount.conf. username and password on the client have to match username and client on the webdav server. on login the credentials get parsed to the server and the share gets mountet.

<volume  fstype="davfs" options="username=%(USER),nodev,nosuid,noexec,uid=%(USER),gid=%(USER),dir_mode=0700,file_mode=0700,_netdev"
        path="https://192.168.1.1/data/" mountpoint="/mnt/data" >
        </not><not><user>root</user></not><not><user>lightdm</user></not></volume>

this is normally done for every user, so you have to exclude the users you don't want to mount shares e. g. root or the user the login manager uses (lightdm in this case). some of my options are redundant due to defaults (if I remember correctly e. g. noexec). plz. read the man pages for further explanation.

Anonymous
Thu 26 May 2016 06:04:08 PM UTC, comment #3: 

pam_mount will pass the password to mount.davfs through a pipe. But of course pam_mount needs to get the password somehow.
As I understand pam_mount usually uses your login password or it will prompt you for the password. Please consult the pam_mount manual for definite information (I don't use pam_mount).

Werner

- <_71007>
Thu 26 May 2016 03:17:17 PM UTC, comment #2: 


I read that there is a way to automatically mount the webdav share with pam_mount. That's why there is the "username" option for davfs2. This way , there is no password stored, is it correct??



Souvarine <souvarine1234>
Wed 25 May 2016 07:42:31 AM UTC, comment #1: 

What I don't understand:
You want to automatically mount the file system. So you don't want to type in any secret for mounting.
If your WebDAV password is encrypted, how does the program get the secret that is needed to decrypt the password?

If you want to mount automatically then the secret needed for WebDAV must be stored somewhere on your compüuter in a way a program can get it without user intervention. Why not store it in a file that is only readable by root?
How would you like to store the secret and how would davfs2 be able to get it?

If you want your password to be stored encrypted you can make /etc/davfs2 an encrypted file system. But of course the password for this encrypted file system must be available at boot time in order to be able to read the files. But I can't see any security advantage.

Werner

- <_71007>
Tue 24 May 2016 06:19:25 PM UTC, original submission:  

Hi,

I want my system to automatically mount a webdav server at start. I use the /etc/davfs/secret file to store the webdav login and password. But I don't want the password to be stored in plain text for security reason.

Is there a way to store the Webdav password not in plain text but crypted?

Thanks


Souvarine <souvarine1234>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by _71007 (Posted a comment)
  • -email is unavailable- added by souvarine1234 (Submitted the item)
  • -email is unavailable- added by souvarine1234
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-12-26 _71007 Open/ClosedOpen Closed
    2016-05-25 _71007 StatusNone In Progress
        Assigned toNone _71007
    2016-05-24 souvarine1234 Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code