Thread: Redhat 8, RSSH and chroot jail
Brought to you by:
xystrus
From: Anthony R. <ar...@am...> - 2003-11-21 15:51:14
|
Hello, I've been fiddling with rssh and jailed sftp access for over a day and I'm stumped trying to figure out why my test login can successfully log in just to be bumped back out. I'm probably missing something obvious and hopefully somebody may be able to point out my problem. There are two flavours I'm installing this on; Redhat 8 and another derived from Debian. The Debian system was simple to setup, jail working an all. Not so good for Redhat though. I've listed the jail below. The test account has been created, it's home directory set to the jail directory (clients) and rssh set as the shell. I've updated syslogd as well to accept from clients/dev/log in hopes of catching the problem, but I don't see the issue. I've included it below as well. I appreciate any help or advice provided. CHROOT JAIL /clients /clients/beta /clients/release /clients/global /clients/bin /clients/bin/sh /clients/lib /clients/lib/libtermcap.so.2 /clients/lib/libdl.so.2 /clients/lib/libc.so.6 /clients/lib/ld-linux.so.2 /clients/lib/libresolv.so.2 /clients/lib/libutil.so.1 /clients/lib/libnsl.so.1 /clients/lib/libcrypto.so.2 /clients/usr /clients/usr/libexec /clients/usr/libexec/openssh /clients/usr/libexec/openssh/sftp-server /clients/usr/libexec/rssh_chroot_helper /clients/usr/lib /clients/usr/lib/libz.so.1 /clients/usr/kerberos /clients/usr/kerberos/lib /clients/usr/kerberos/lib/libk5crypto.so.3 /clients/usr/kerberos/lib/libcom_err.so.3 /clients/usr/kerberos/lib/libkrb5.so.3 /clients/usr/bin /clients/usr/bin/scp /clients/etc /clients/etc/passwd /clients/dev /clients/dev/log SYSTEM LOG Nov 21 10:28:26 hostname sshd(pam_unix)[5338]: session opened for user beta by (uid=525) Nov 21 10:28:26 hostname rssh[5339]: setting log facility to LOG_USER Nov 21 10:28:26 hostname rssh[5339]: allowing sftp to all users Nov 21 10:28:26 hostname rssh[5339]: setting umask to 022 Nov 21 10:28:26 hostname rssh[5339]: chrooting all users to /clients Nov 21 10:28:26 hostname rssh[5339]: chroot cmd line: /usr/libexec/rssh_chroot_helper "/clients" 2 "/" /usr/libexec/openssh/sftp-server Nov 21 15:28:26 hostname rssh_chroot_helper[5339]: new session for unknown user, UID=525 Nov 21 10:28:26 hostname sshd(pam_unix)[5338]: session closed for user beta -- *Anthony Rabaa* Software Developer AMCon Research Inc., Ottawa, Ontario, Canada http://www.amconresearch.com |
From: Derek M. <co...@pi...> - 2004-03-30 00:44:51
|
On Fri, Nov 21, 2003 at 10:50:55AM -0500, Anthony Rabaa wrote: > Hello, > > I've been fiddling with rssh and jailed sftp access for over a day and > I'm stumped trying to figure out why my test login can successfully log > in just to be bumped back out. I'm probably missing something obvious > and hopefully somebody may be able to point out my problem. There are > two flavours I'm installing this on; Redhat 8 and another derived from > Debian. The Debian system was simple to setup, jail working an all. > Not so good for Redhat though. Sorry, I seem to have missed this message the first time around. Did you get it working? -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D |