Mounting encrypted hard disk partitions now asks for the root password.

Thank you for your bug report

Ccing pitti (the udisk maintainer), hey Martin, do you have any idea what component is to blame there?

I just tried this with an actual LUKS-encrypted USB stick, and it's automounted just fine, so I'm afraid this is not obvious to reproduce. Can you please insert the device, do

   udisksctl dump > /tmp/udisksctl-dump.txt

attach /tmp/udisksctl-dump.txt to this bug report, and then copy&paste the output of

  udisksctl unlock -b /dev/sdb1

(I assume it is /dev/sdb1, but it might also be a different name like sdc1 or sdd1, depending on what the latest device is) It should say something like

$ udisksctl unlock -b /dev/sdb1
Passphrase:
Unlocked /dev/sdb1 as /dev/dm-0.

If that worked, please try to mount this with

  udisksctl mount -b /dev/dm-0

or whichever device the previous "unlock" command said. For me it says

$ udisksctl mount -b /dev/dm-0
Mounted /dev/dm-0 at /run/media/martin/PittiCrypt.

Do you get an error message on either?

You are completely right: I seem to encounter a completely different problem than I expected:
My system setup is the following:
 - /dev/sda is a hard disk (2 partitions) comtaining my encrypted home folder and my swap partition.
 - /dev/sdb is a small SSD containing my system (/dev/sdb1) and a folder I want to keep backups in just for the case my hard disk breaks.

The memory stick I tried to verify the problem with before I reported this bug seems to be severely broken - and it clearly is a hardware fault. Did try your commands with one of my girlfriend's memory stick and the stick was mounted. Then I unmounted the stick, re-inserted it to the computer and after typing in the passphrase it worked, either. So I formatted /dev/sdb2 using luksformat - and got the following results:

udisksctl unlock -b /dev/sdb2
Passphrase:
Error unlocking /dev/sdb2: GDBus.Error:org.freedesktop.UDisks2.Error.NotAuthorized: Not authorized to perform operation
gunter@lore:~$ sudo udisksctl unlock -b /dev/sdb2
Passphrase:
Unlocked /dev/sdb2 as /dev/dm-1.

Having your commands as a starting point debugging the problem further was easy:

1.) The system claims to want a passphrase twice but for mounting my hard disk partition it needs both my login passwort and the partition's passphrase. When I insert the stick only the passphrase is needed.
2.) After partitioning the stick and formatting its second partition with an ext4 filesystem using luksformat (the first partition is unencrypted ext4) I still don't need my password to mount the stick. So the problem doesn't seem to be that I formatted the second partition using luksformat.

This means my problem was that for mounting a encrypted hard disk partition my password is needed as well as the luks passphrase whereas for a stick only the latter is needed. A week before i wrote the bug report this wasn't the case.

 not only asking me for the passphrase of the device

Did change the title and description of this bug report to reflect the problem I actually had instead of the one I thought I encountered.

PeterPall [2012-06-11 17:04 -0000]:
> 1.) The system claims to want a passphrase twice but for mounting my
> hard disk partition it needs both my login passwort and the
> partition's passphrase. When I insert the stick only the passphrase
> is needed.

This is expected. Your login password is necessary for "sudo", to be
able to access the raw partition.

Note that "luksformat" is rather a power-user command line tool.
Ordinarily you would create encrypted partitions with the graphical
"Disks" tool.

Mounting the stick does not involve sudo, and thus does not need your
login password.

> This means my problem was that for mounting a encrypted hard disk
> partition my password is needed as well as the luks passphrase whereas
> for a stick only the latter is needed.

Indeed. I'll fix that.

This bug was fixed in the package policykit-desktop-privileges - 0.12

---------------
policykit-desktop-privileges (0.12) quantal; urgency=low

  * Allow local admins to unlock encrypted system drives with udisks2.
    (LP: #1007149)
 -- Martin Pitt <email address hidden> Wed, 13 Jun 2012 06:43:17 +0200