Thread: Why root is restricted on a per user configuration?
Brought to you by:
xystrus
From: R. D. <rap...@gm...> - 2011-08-31 14:00:39
|
Hi, I've set up a per user configuration to restrict one of my user with rssh. I've set rssh shell to this user and only this one. I've set the correct options in rssh.conf This work like a charm. I can connect to the server with root user (ssh root@server). But then, I can't ssh other servers from here. It says: > This account is restricted by rssh. > Allowed commands: sftp > > If you believe this is in error, please contact your system administrator. Why root is restricted by rssh inside the server, while I did not configure that? Centos 5.6, openSSH 4.3p2 rssh 2.3.3 Thank you |
From: Derek M. <co...@pi...> - 2011-08-31 14:32:10
|
On Wed, Aug 31, 2011 at 04:00:19PM +0200, Raphaël Davaillaud wrote: > I can connect to the server with root user (ssh root@server). > But then, I can't ssh other servers from here. > It says: > > > This account is restricted by rssh. > > Allowed commands: sftp > > > > If you believe this is in error, please contact your system administrator. > > Why root is restricted by rssh inside the server, while I did not > configure that? There's no possible way this is happening unless root's shell is set to be rssh, or you've somehow overwritten root's shell in the filesystem with rssh. Check root's entry in /etc/passwd, e.g.: $ grep root /etc/passwd root:x:0:0:root:/root:/bin/bash If you see what you expect to see, then run root's shell with --version or -V or whatever option that shell uses to report its version, and make sure it really is the shell you think it is. -- Derek D. Martin http://www.pizzashack.org/ GPG Key ID: 0x81CFE75D |
From: R. D. <rap...@gm...> - 2011-08-31 14:53:03
|
On 31/08/2011 16:31, Derek Martin wrote: > There's no possible way this is happening unless root's shell is set > to be rssh, or you've somehow overwritten root's shell in the > filesystem with rssh. Check root's entry in /etc/passwd, e.g.: > > $ grep root /etc/passwd > root:x:0:0:root:/root:/bin/bash > > If you see what you expect to see, then run root's shell with > --version or -V or whatever option that shell uses to report its > version, and make sure it really is the shell you think it is. > Well, my /etc/passwd is correctly set. the root current shell is bash according to ps -s $$ and bash --version tells me that it's really bash. but, you gave me an idea. I've run a ssh -v command and the ssh binary is replaced by rssh via a symlink. And in fact, this is entirely my mistake. I've followed a tutorial where it makes a symlink from rssh to ssh, but for another purpose... Well, thanks for the help and quick response :) -- Raphael |