[Bug 1406940] Re: ecryptfs does not work for domain users (AD, likewise/powerbroker)

[Ubuntu Foundations Team Bug Bot]

The attachment "45_44.diff" seems to be a debdiff.  The ubuntu-sponsors
team has been subscribed to the bug report so that they can review and
hopefully sponsor the debdiff.  If the attachment isn't a patch, please
remove the "patch" flag from the attachment, remove the "patch" tag, and
if you are member of the ~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issue please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1406940

Title:
  ecryptfs does not work for domain users (AD, likewise/powerbroker)

Status in ecryptfs-utils package in Ubuntu:
  New

Bug description:
  Ecryptfs encryption does not work for domain users in an active
  directory domain, integrated with likewise open / powerbroker for the
  following reasons:

  - domain user names contain backslashes (DOMAIN\user.name). Ecryptfs checks for valid usernames, which mustn't contain backslashes
  - There is no pam hook which automatically activates encryption of the home directory of new domain users

  
  Steps to reproduce:
  - Set up AD controller, e.g. via samba4
  - Set up ecryptfs-utils on an ubuntu machine
  - Add ubuntu machine to domain with likewise open / powerbroker
  - Login with domain user

  Result:
  - Home directory is unencrypted

  Additional steps:
  - Manually encrypt home directory of domain user

  Additional result:
  - On login decryption fails with message: "Username has unsupported characters"

  
  Expected result:
  Home directories of domain users can easily be encrypted and decrypted with ecryptfs

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/1406940/+subscriptions