[Chrootssh-users] Can chroot, but not through SSH/SFTP
Brought to you by:
punkball
From: Marshall, Pat(Montvale) <Mar...@AP...> - 2004-04-20 21:34:14
|
Okay. I'm running on AIX 5.2 ML2. I've pulled the latest patched = source and compiled it. I can login via SSH & SFTP for non-chrooted = users, but when I try for a chroot, I get the following: # ssh -l marshalp mftgw001 =20 marshalp@mftgw001's password:=20 Connection to mftgw001 closed by remote host. Connection to mftgw001 closed. My home directory is set to /home/marshalp/./ I can successfully chroot from the command line with no problems, and = can run various commands. However, the ssh bit still isn't working. = Note that my OpenSSH environment is installed under /in/OPENSSH instead = of the traditional location. My chroot directory looks like this: # find . -ls 8 4 d--x--x--x 8 root system 4096 Apr 21 02:22 . 9 4 -rwx------ 1 marshalp marshalp 254 Apr 9 05:35 = ./.profile 39 0 drwx------ 2 marshalp marshalp 256 Apr 9 20:28 ./.ssh 40 4 -rw------- 1 marshalp marshalp 227 Apr 9 20:28 = ./.ssh/authorized_keys 121 0 dr-xr-xr-x 2 root system 256 Apr 21 00:10 ./dev 130 0 crw-rw-rw- 1 root system 2, 2 Apr 21 00:10 = ./dev/null 127 0 crw-rw-rw- 1 root system 2, 3 Apr 21 00:10 = ./dev/zero 123 0 dr-xr-xr-x 2 root system 256 Apr 21 01:15 ./etc 151 4 -rw------- 1 root system 107 Apr 21 01:15 = ./etc/group 150 4 -rw------- 1 root system 102 Apr 21 01:15 = ./etc/passwd 149 4 -rw------- 1 root system 111 Apr 21 01:14 = ./etc/shells 146 0 dr-xr-xr-x 3 root system 256 Apr 21 01:10 ./in 147 0 dr-xr-xr-x 3 root system 256 Apr 21 01:11 = ./in/OPENSSH 148 0 dr-xr-xr-x 2 root system 256 Apr 21 01:11 = ./in/OPENSSH/libexec 144 140 -r-sr-sr-x 1 root system 140230 Apr 21 01:05 = ./in/OPENSSH/libexec/sftp-server 125 0 dr-xr-xr-x 4 root system 256 Apr 21 01:20 ./usr 122 4 d--x--x--x 2 root system 4096 Apr 21 01:09 = ./usr/bin 131 20 -r-xr-xr-x 1 root system 18748 Apr 21 00:05 = ./usr/bin/cp 145 228 -r-xr-xr-x 1 root system 229804 Apr 21 01:09 = ./usr/bin/ksh 132 24 -r-xr-xr-x 1 root system 22564 Apr 21 00:05 = ./usr/bin/ls 133 8 -r-xr-xr-x 1 root system 6096 Apr 21 00:05 = ./usr/bin/mkdir 134 12 -r-xr-xr-x 1 root system 11964 Apr 21 00:05 = ./usr/bin/mv 135 12 -r-xr-xr-x 1 root system 9188 Apr 21 00:05 = ./usr/bin/rm 136 12 -r-xr-xr-x 1 root system 9188 Apr 21 00:05 = ./usr/bin/rmdir 143 140 -r-xr-xr-x 1 root system 140230 Apr 21 01:05 = ./usr/bin/sftp-server 137 228 -r-xr-xr-x 1 root system 229804 Apr 21 00:05 = ./usr/bin/sh 124 0 dr-xr-xr-x 2 root system 256 Apr 21 01:03 = ./usr/lib 139 6872 -r-xr-xr-x 1 root system 7036004 Apr 21 00:15 = ./usr/lib/libc.a 141 12 -r-xr-xr-x 1 root system 10993 Apr 21 01:03 = ./usr/lib/libcrypt.a 142 1576 -r--r--r-- 1 root system 1610327 Apr 21 01:03 = ./usr/lib/libcurses.a Any clues or hints would be greatly appreciated. A solution will be = even more appreciated! Thanks! -Pat Patrick Marshall Systems Administrator 201-571-4392 Great Atlantic & Pacific Tea Co mar...@ap... |