"Forbidden command" when trying to use sftp-server
Brought to you by:
xystrus
From: Kai H. <th...@ka...> - 2003-07-03 09:47:11
|
Hi there, I recently installed rssh 2.0.3 on my Debian sid (via apt-get) to restrict my www-Admin to sftp only. As long as his shell is set to /bin/bash he can log in via sftp, but with his shell set to /usr/bin/rssh, the connection is immedeately terminated. Syslog states: Jul 3 11:10:43 ignition rssh[6035]: setting log facility to LOG_USER Jul 3 11:10:43 ignition rssh[6035]: allowing scp to all users Jul 3 11:10:43 ignition rssh[6035]: allowing sftp to all users Jul 3 11:10:43 ignition rssh[6035]: setting umask to 022 Jul 3 11:10:43 ignition rssh[6035]: user attempted to execute forbidden commands Jul 3 11:10:43 ignition rssh[6035]: command: /usr/local/libexec/sftp-server The stfp-sever has permissions 755. I do not use a chrooted environment (yet) and did not touch the rssh.conf, so allowscp and allowsftp are both set. Any help would be appreciated. Regards Kai Hanisch -- It is a good idea to be at the console of your machine when twiddling your network restrictions. If you are working remotely, then you can lock yourself out of your machine inadvertently with a missing or missplaced rule. If that happens, you are reduced to using the standard Windows remote administration tool - your car. (Hacking Linux Exposed, p. 484) |