Re: "Forbidden command" when trying to use sftp-server

[Derek M. <co...@pi...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, Jul 03, 2003 at 11:49:37AM +0200, Kai Hanisch wrote:
> 
> Hi there,
> 
> I recently installed rssh 2.0.3 on my Debian sid (via apt-get) to 
> restrict my www-Admin to sftp only. As long as his shell is set to 
> /bin/bash he can log in via sftp, but with his shell set to 
> /usr/bin/rssh, the connection is immedeately terminated. Syslog states:

1. Download 2.0.4 from www.pizzashack.org/rssh/downloads.html

2. unpack the sources

3. run configure

4. mail the output of configure to the list.


> Jul  3 11:10:43 ignition rssh[6035]: command: /usr/local/libexec/sftp-server

Oh, nevermind.  The path to sftp-server is hard-coded in the binary
for security reasons.  You're using a local installation of openssh,
but the Debian package for rssh expects it to be installed as
/usr/lib/sftp-server, which is where the debian package puts it.

You have 2 choices:

 - install Debian's ssh packages (not recommended)
 - download rssh as above, and install from sources (recommended)

The latter is recommended because you've probably got OpenSSH 3.5 or
later installed (which is good, so you can make sure the sshd
parameter PermitUserEnvironment is set to no), and because 2.0.4 fixes
some bugs in all previous 2.0 releases.

- -- 
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0x81CFE75D

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/BBL6djdlQoHP510RAkWxAJ0aGrpPhFhNXWqnEJU0Cc4UkppXmACgpE/k
vcUVIcDVpq5rkdBaGbA11YI=
=BmeS
-----END PGP SIGNATURE-----