Hi,
I want to add some basic password policies to my NAS and I wonder how I can change the omv pam so that OMV adopts the policies.
The password policies are set through the pam_pwquality.so module.
I hope somebody can help me.
Posts by Sputter1414
-
-
I have tried this several times, but nope same problem.
-
Sooo… I have fucked up my ssh config a bit, and therefore I tried to remove a purge OpenSSH, but after I tried to install it (I have physical access to the machine) it says that it can’t configure OpenSSH. OpenSSH also doesn’t start anymore.
I atteched the logs. I hope someone can help me.
-
Thank you guys.
I found my mistake: I forgot to create the SMB share and that's the reason I got an error. After this I tried to mount it the wrong way and yeah … this hasn't worked really well. Now everything works.
-
You don't have to if it shows up in the list of disks to use in the LUKS plugin. I just assumed it had a filesystem on it.
Sure but you will lose the data on it.
Sorry that I bother you again, but I can't add a file-system to the encrypted volume as well as mount it to a folder.
If I try to create a new file-system on the decrypted LUKS container it “creates” one and in the command line on the webgui will stand at the end of the line “end of line” but nothing seems to happen. I can't see any new file system and I also can't share a folder.
Maybe I'm too silly to do it correctly. I hope you can help me. -
Display More
You did something wrong then. You should:
wipe the disk
create the luks container on the disk
create the filesystem on the luks container
if you created the filesystem on the disk, it would not be encrypted and you would overwrite the luks setup.
Okay, interesting.
I need to actually wipe the disk even if it is a complete empty new storage device that is plugged in.
Thanks for the help, but I have a last question. Is it possible to apply the encryption on a used driver? I only work with the LUKS tool via. the GNOME (Debian) GUI. -
LUKS is the standard for drive encryption in Linux and it works very well. Please be more precise. How are you trying to encrypt a drive, what's the error and what makes you think it doesn't work?
I use the OMV plugin to encrypt it and yeah there is no error…
-
No offense but you evidently don't know how LUKS works. While the LUKS container is unlocked, the system sees files. Lock the LUKS container (or reboot) and no one is getting those files. LUKS encrypts the entire block device that the filesystem is sitting on. I use it at work and I work in the healthcare world where information leaks are very bad.
LUKS uses a 512 bit aes-xts-plain64 encryption method by default. I highly doubt you need a stronger encryption.
Yeah, no problem.
The thing is even after an restart the driver is not encrypted, and you can't lock it in the interface, it doesn't show anything.This is the state after I tried to encrypt a disk.
-
There is a LUKS plugin for OMV but I have no experience with it or any other ways to do this.
Also, if the disk is unlocked and mounted it can be read if the machine physical security, network security, or permissions will allow it.
The LUKS encrypt plugin does nothing for me.
If you try to encrypt a driver it seems to work except that it doesn't encrypt anything. Do you know other solutions for a good and strong AES encryption?
