EncFS Automount at Login with pam_encfs

Question

I was looking at wiki and the google page for encfs but I'm still confused about the conifguration.
My /etc/pam.d/system-auth looks like this:
#%PAM-1.0
auth sufficient pam_encfs.so
auth required pam_unix.so try_first_pass nullok
auth optional pam_permit.so
auth required pam_env.so
account required pam_unix.so
account optional pam_permit.so
account required pam_time.so
password required pam_unix.so try_first_pass nullok sha512 shadow
password optional pam_permit.so
session required pam_limits.so
session required pam_unix.so
session optional pam_permit.so
and my pam_encfs.conf looks like this:
user /home/user/Google\ Drive/Personal /home/user/Personal - - allow_other
the encfs volume was setup with the "p" option. Login seems to work just fine but the encrypted volume is not mounted. I image my pam_encfs.conf is not setup correctly. Any idea what I'm doing wrong?

Answer 1

did you setup a proxyagent for accessing the
userPassword attribute, this is taken care of during
idsconfig? if you did unless you bind as that user
you will not be able to login as that user. the
"ldapclient manual" you've supplied doesn't show any
"-a proxyDn=" or "-a proxyPassword=" values. try
setting those if you haven't.I did a reconfigure with idsconfig now and added your mentioned options to the ldapclient-command. Also changed serviceAuthenticationMethod to pam_ldap:simple. The config is now:
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=$DOMAINS
NS_LDAP_BINDPASSWD= $PASSWORD
NS_LDAP_SERVERS= $SERVERIP
NS_LDAP_SEARCH_BASEDN= dc=$DOMAINS
NS_LDAP_CACHETTL= 0
NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:simple
when you do your ldapsearch if you can't see
userPassword then you must bind as a proxyagent.
try "ldapsearch -h host -D
cn=proxyagent,ou=profile,dc=xyz,dc=com -w proxy_pass
-b ou=people,dc=xyz,dc=com uid=ldap_user"This works fine, so does ldaplist. But the authlog still produces errors:
pam_authenticate(8a158, 0): error Authentication failed
PAM[20279]: pam_set_item(8a158:authtok)
sshd[20279]: [ID 800047 auth.info] Keyboard-interactive (PAM) userauth failed[9] while authenticating: Authentication failed
Here the output of the access log while searching with ldapsearch:
SRCH base="ou=people,dc=$DOMAINS" scope=1 filter="(&(objectClass=posixAccount)(uid=$USERNAME))" attrs=ALL
RESULT err=0 tag=101 nentries=1 etime=0
But when trying to authorize it gives me this:
BIND dn="uid=$USERNAME,ou=People, dc=$DOMAINS" method=128 version=3
RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=$USERNAME,ou=people,dc=$DOMAINS"