LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Closed Thread
 
Search this Thread
Old 03-12-2011, 09:52 AM   #1
aggrishabh
Member
 
Registered: Nov 2010
Posts: 75

Rep: Reputation: 1
Unhappy recover encrypted filesystem


Hi All,

I recently install RHEL5.5 and as a experiment encrypt the root file system at the time of installation. now at the time of booting it ask for the pass phrase which i gave at the time of installation. now the issue is i completely remember the pass phrase but OS is not validating this. please help me in recover it or any idea to hack/bypass this thing.

Thanks in advance.
 
Old 03-12-2011, 10:12 AM   #2
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,241

Rep: Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475
Quote:
Originally Posted by aggrishabh View Post
Hi All,
I recently install RHEL5.5 and as a experiment encrypt the root file system at the time of installation. now at the time of booting it ask for the pass phrase which i gave at the time of installation. now the issue is i completely remember the pass phrase but OS is not validating this. please help me in recover it or any idea to hack/bypass this thing.
Thanks in advance.
Sorry, you cannot 'hack' or bypass this. Would be fairly pointless if you COULD. The only thing that would prevent you from reading your partition, would be that you're putting in the wrong passphrase.

Since you're using RHEL, you can contact RedHat support, since you're paying for it with your RHEL subscription. They may have some idea with the product that they ship.
 
Old 03-12-2011, 10:24 AM   #3
jschiwal
Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654Reputation: 654
Try booting using a live distro. See if you can unlock the partition manually (with the passphrase of course)

cryptsetup luksOpen <device> cr_<device>

If this is successful, use "file -s /dev/mapper/cr_<device>" to see what the partition is.

Yours isn't the first message about this. You seem to have LVM over Luks. I think I have read somewhere that this may be asking for trouble, but can't find where I read that.

After decrypting the device, use the LVM related programs so you end up with logical device nodes.
If the LVM exists. try vgmknodes to create new nodes and delete stale ones.

Last edited by jschiwal; 03-12-2011 at 10:31 AM.
 
1 members found this post helpful.
Old 03-12-2011, 02:18 PM   #4
TB0ne
Guru
 
Registered: Jul 2003
Location: Birmingham, Alabama
Distribution: SuSE, RedHat, Slack,CentOS
Posts: 14,241

Rep: Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475Reputation: 2475
Good one...I must remember that. I've not played with LVM's except for Veritas on SAN's, just because I think they're overkill for a stand-alone workstation/server. These days, it's unlikely you'd need to add a ton of disk space to a volume, since drive storage is so cheap.

Just got a 750GB drive for my laptop for $59...don't think I'll need to be extending any partitions anytime soon.
 
Old 03-13-2011, 12:03 PM   #5
colucix
Moderator
 
Registered: Sep 2003
Location: Bologna
Distribution: CentOS 6.5 OpenSuSE 12.3
Posts: 10,458

Rep: Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941
@aggrishabh: as already pointed out by TB0ne if you could easily bypass the disk encryption it would be fairly pointless. Furthermore if someone would be able to give advice in this sense, it would be against the LQ rules and philosophy. Indeed, despite the good intentions, this kind of information might be used in a malicious way.

Said that, you have already received two good advices:
1. contact the Red Hat's support if you have a valid subscription
2. try to unlock the encrypted partition manually through a live CD, using the given passphrase.

Please, update us on your progresses.
 
1 members found this post helpful.
Old 03-16-2011, 03:39 AM   #6
colucix
Moderator
 
Registered: Sep 2003
Location: Bologna
Distribution: CentOS 6.5 OpenSuSE 12.3
Posts: 10,458

Rep: Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941Reputation: 1941
Since the OP did not reply in the past 60 hours, thread closed.
 
1 members found this post helpful.
  


Closed Thread


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to recover my encrypted Home directory pazzport Linux - Desktop 7 05-14-2012 11:30 PM
Recover Accidentally formatted encrypted raid partition pazzport Linux - Desktop 1 10-15-2010 03:49 AM
Recover encrypted LUKS partition itinlopez Linux - General 3 11-30-2008 02:20 AM
encrypted filesystem done -now what? randomx Linux - Security 1 04-27-2005 06:13 AM
Encrypted Root Filesystem HOWTO and /dev filesystem tmillard Linux From Scratch 0 10-18-2004 03:58 PM


All times are GMT -5. The time now is 08:42 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration