Re: [Jailkit-users] Problems configuring in Suse 10.2

[Jere Retzer]

I have the /etc/passwd in the file now. The sequence I'm using creates the 
groups and users and then moves them to the jail. It reads:

mike:x:1001:1000::/home/mike:/usr/sbin/jk_lsh
lcmc:x:1002:1001::/home/lcmc:/usr/sbin/jk_lsh

Now I can get a session by sftp address@hidden but it terminates as soon as I 
enter the password. Here is what I see in /var/log/messages:

Mar  6 12:21:21 thinkpad sshd[13878]: subsystem request for sftp
Mar  6 12:21:21 thinkpad jk_chrootsh[13879]: abort, path /home/jail/./home/lcmc 
is setgid
Mar  6 12:21:21 thinkpad jk_chrootsh[13879]: abort, path /home/jail/./home/lcmc 
does not have group 1001
Mar  6 12:21:39 thinkpad sshd[13882]: Accepted keyboard-interactive/pam for 
mike from 127.0.0.1 port 22844 ssh2
Mar  6 12:21:39 thinkpad sshd[13885]: subsystem request for sftp
Mar  6 12:21:39 thinkpad jk_chrootsh[13886]: abort, path /home/jail/./home/mike 
is setgid
Mar  6 12:21:39 thinkpad jk_chrootsh[13886]: abort, path /home/jail/./home/mike 
does not have group 1000

Thanks in advance


Testing sftp just now

>>> address@hidden 3/5/2007 11:10 PM >>>
Jere Retzer wrote:
> I'm attempting to set up a simple jail for scp and sftp only in Suse
> 10.2
> 
> When I try to move a user to the jail I get the following error:
> 
> [hostname]# jk_jailuser /home/sftproot jailuser Traceback (most
> recent call last): File "/usr/sbin/jk_jailuser", line 300, in
> <module> main() File "/usr/sbin/jk_jailuser", line 284, in main jail
> = getjail(jail,config) File "/usr/sbin/jk_jailuser", line 225, in
> getjail if (jail[0] != '/'): TypeError: 'NoneType' object is
> unsubscriptable
> 
> What is happening here? Is there a config file that I missed? I
> looked over jk_init.ini to see if Suse file locations differ but
> didn't see notice a problem. Thanks in advance.

this was a big in jk_jailuser, which is fixed in cvs. To workaround (I
think): make sure that the shell and <jail>/etc/passwd exist in the
jail, and use:

jk_jailuser -j /home/sftproot jailuser

regards,
        Olivier


_______________________________________________
Jailkit-users mailing list
address@hidden 
http://lists.nongnu.org/mailman/listinfo/jailkit-users