Re: problems with rssh

[Mr. M. L. <mai...@ya...>]

I have it to where it uses rssh as shell, and when i
try to locally su user, it says you can only scp with
this account.

so with winscp, i tried both scp and sftp, but it
still does not work.

with scp protocol, it says...
Connection has been unexpectedly closed. Server sent
command exit status 0.

with sftp protocol, it says...

Connection has been unexpectedly closed. Server sent
command exit status 0.

and that it couldn't initialize sftp protocol.



--- Derek Martin <co...@pi...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Tue, Jul 22, 2003 at 08:57:31AM -0700, Mr.
> Mailing List wrote:
> > I'm trying to use winscp, which basically does
> > everything through scp.  I also use sshfs from
> lufs.
> 
> WinSCP does not work with rssh and scp.  This is in
> the FAQ, which I
> recommend you read.  Newer versions of WinSCP do
> support sftp, which
> should work, or so I am told...  I have made no
> effort to verify that.
> To work with scp, WinSCP needs to be able to run a
> number of other
> commands, e.g. ls.  However, rssh will not allow ls
> to be run, so
> WinSCP will not be able to get a list of files. 
> Unless you use a
> recent version, which will require sftp.  I don't
> know the details of
> making that work, nor do I care to...  Check the
> documentation for
> WinSCP.
> 
> > What I am wanting to do is to restrict user share
> to
> > /share, and possibly /share/html which symlinks to
> > /var/www/html(of which he is part of the group to
> > access both).
> 
> You can not do this; it is impossible.  The only way
> to "restrict" a
> user is to chroot that user's processes into some
> directory.  When you
> chroot, the root of the file system becomes the
> directory you specify,
> for the chrooted process and all of its children. 
> So if you chroot
> them to /share, then /share becomes /, and since
> /var/www/html is not
> under /share, it will be inaccessable, as if it did
> not exist at all.
> There is no way, via symlink or otherwise, to make
> it accessible,
> other than to actually move it somewhere under
> /share.
> 
> Please read the documentation, specifically the file
> CHROOT in the
> source distribution (or
> /usr/share/doc/rssh-2.1.1/CHROOT if you
> installed from RPM), and also the manpage for
> chroot(2).
> 
> > I did usermod and changed his shell to rssh, and I
> had
> > this in the config file?
> 
> > # if you DO NOT want to chroot users, LEAVE THIS
> > COMMENTED OUT.
> > # Quotes not required unless path contains a
> space...
> > chrootpath="/share dir"
> 
> You are chrooting all users to the directory "/share
> dir", which based
> on your description, does not exist.  You want to
> change it to
> "/share", and make sure you've set up a proper
> chroot jail under that
> directory.
> 
> However, based on what you've said, I don't think
> that's really what
> you want, and I don't think it's possible for you to
> get what you
> want.  That is, unless you can be satisfied with
> limiting them to
> /share (and everything under it, of course) only.
> 
> - -- 
> Derek D. Martin
> http://www.pizzashack.org/
> GPG Key ID: 0xDFBEAD02
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> 
>
iD8DBQE/HWcadjdlQoHP510RAtEeAKCR/3lscyGvT5lNGTgBIsi31ukEeACdFGNV
> +s4J+V/YtWUOQyCAcgtW5BA=
> =NDLa
> -----END PGP SIGNATURE-----
> 
> 
>
-------------------------------------------------------
> This SF.net email is sponsored by: VM Ware
> With VMware you can run multiple operating systems
> on a single machine.
> WITHOUT REBOOTING! Mix Linux / Windows / Novell
> virtual machines at the
> same time. Free trial click here:
> http://www.vmware.com/wl/offer/345/0
> _______________________________________________
> rssh-discuss mailing list
> rss...@li...
>
https://lists.sourceforge.net/lists/listinfo/rssh-discuss


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com