Redhat 8, RSSH and chroot jail

[Anthony R. <ar...@am...>]

Hello,

I've been fiddling with rssh and jailed sftp access for over a day and 
I'm stumped trying to figure out why my test login can successfully log 
in just to be bumped back out.  I'm probably missing something obvious 
and hopefully somebody may be able to point out my problem.  There are 
two flavours I'm installing this on; Redhat 8 and another derived from 
Debian.  The Debian system was simple to setup, jail working an all.  
Not so good for Redhat though.

I've listed the jail below.  The test account has been created, it's 
home directory set to the jail directory (clients) and rssh set as the 
shell.  I've updated syslogd as well to accept from clients/dev/log in 
hopes of catching the problem, but I don't see the issue.  I've included 
it below as well.  I appreciate any help or advice provided.

CHROOT JAIL
/clients
/clients/beta
/clients/release
/clients/global
/clients/bin
/clients/bin/sh
/clients/lib
/clients/lib/libtermcap.so.2
/clients/lib/libdl.so.2
/clients/lib/libc.so.6
/clients/lib/ld-linux.so.2
/clients/lib/libresolv.so.2
/clients/lib/libutil.so.1
/clients/lib/libnsl.so.1
/clients/lib/libcrypto.so.2
/clients/usr
/clients/usr/libexec
/clients/usr/libexec/openssh
/clients/usr/libexec/openssh/sftp-server
/clients/usr/libexec/rssh_chroot_helper
/clients/usr/lib
/clients/usr/lib/libz.so.1
/clients/usr/kerberos
/clients/usr/kerberos/lib
/clients/usr/kerberos/lib/libk5crypto.so.3
/clients/usr/kerberos/lib/libcom_err.so.3
/clients/usr/kerberos/lib/libkrb5.so.3
/clients/usr/bin
/clients/usr/bin/scp
/clients/etc
/clients/etc/passwd
/clients/dev
/clients/dev/log

SYSTEM LOG
Nov 21 10:28:26 hostname sshd(pam_unix)[5338]: session opened for user 
beta by (uid=525)
Nov 21 10:28:26 hostname rssh[5339]: setting log facility to LOG_USER
Nov 21 10:28:26 hostname rssh[5339]: allowing sftp to all users
Nov 21 10:28:26 hostname rssh[5339]: setting umask to 022
Nov 21 10:28:26 hostname rssh[5339]: chrooting all users to /clients
Nov 21 10:28:26 hostname rssh[5339]: chroot cmd line: 
/usr/libexec/rssh_chroot_helper "/clients" 2 "/" 
/usr/libexec/openssh/sftp-server
Nov 21 15:28:26 hostname rssh_chroot_helper[5339]: new session for 
unknown user, UID=525
Nov 21 10:28:26 hostname sshd(pam_unix)[5338]: session closed for user beta

-- 

   *Anthony Rabaa*
   Software Developer
   AMCon Research Inc., Ottawa, Ontario, Canada
   http://www.amconresearch.com