I work for an organization that has started to investigate using Likewise/BeyondTrust-Enterprise. Our first test was on an Ubuntu box and it [and pam_mount] worked like a charm! We figured this was a no-brainer. Silly us.
Our work-horse linux systems are all RHEL5 platforms. We have installed Likewise on a test box and the Auth process works just fine. To our great disappointment though we find the there is no pam_mount package. I downloaded the sources from here and have tried to build it by hand but no joy so far. I have had to also find, download and install "libHX" only to find that "libmount" is not a RHEL thing either. I found that in a bundle called "linux-utils". Installing these things allowed me to get past the "configure" step of pam_mount. Running "make" is another thing altogether.
I discovered at some point that pam_mount wanted something from a package called "cryptsetup". RHEL does have a set of cryptsetup-luks* packages and I have installed them all. If I now issue the "make" command I get:
make: Entering directory `/tmp/pam_mount-2.13/src'
ehd.c: In function âehd_init_volume_luksâ:
ehd.c:285: error: variable âformat_paramsâ has initializer but incomplete type
ehd.c:285: error: unknown field âhashâ specified in initializer
ehd.c:285: warning: excess elements in struct initializer
ehd.c:285: warning: (near initialization for âformat_paramsâ)
ehd.c:285: error: storage size of âformat_paramsâ isnât known
ehd.c:291: warning: implicit declaration of function âcrypt_initâ
ehd.c:296: warning: implicit declaration of function âcrypt_formatâ
ehd.c:296: error: âCRYPT_LUKS1â undeclared (first use in this function)
ehd.c:296: error: (Each undeclared identifier is reported only once
ehd.c:296: error: for each function it appears in.)
ehd.c:302: warning: implicit declaration of function âcrypt_keyslot_add_by_volume_keyâ
ehd.c:302: error: âCRYPT_ANY_SLOTâ undeclared (first use in this function)
ehd.c:310: warning: implicit declaration of function âcrypt_freeâ
ehd.c:285: warning: unused variable âformat_paramsâ
make: *** [ehd.o] Error 1
My guess is that the cryptsetup packages are missing include headers or the existing headers are missing various defines.
Is there a RHEL 5 or 6 pam_mount solution? Is there a solution to the issue above?