"Forbidden command" when trying to use sftp-server

[Kai H. <th...@ka...>]

Hi there,

I recently installed rssh 2.0.3 on my Debian sid (via apt-get) to 
restrict my www-Admin to sftp only. As long as his shell is set to 
/bin/bash he can log in via sftp, but with his shell set to 
/usr/bin/rssh, the connection is immedeately terminated. Syslog states:

Jul  3 11:10:43 ignition rssh[6035]: setting log facility to LOG_USER
Jul  3 11:10:43 ignition rssh[6035]: allowing scp to all users
Jul  3 11:10:43 ignition rssh[6035]: allowing sftp to all users
Jul  3 11:10:43 ignition rssh[6035]: setting umask to 022
Jul  3 11:10:43 ignition rssh[6035]: user attempted to execute forbidden 
commands
Jul  3 11:10:43 ignition rssh[6035]: command: /usr/local/libexec/sftp-server

The stfp-sever has permissions 755.

I do not use a chrooted environment (yet) and did not touch the 
rssh.conf, so allowscp and allowsftp are both set.

Any help would be appreciated.

Regards

Kai Hanisch

--
It is a good idea to be at the console of your machine when twiddling 
your network restrictions. If you are working remotely, then you can 
lock yourself out of your machine inadvertently with a missing or 
missplaced rule. If that happens, you are reduced to using the standard 
Windows remote administration tool - your car.

(Hacking Linux Exposed, p. 484)