[Jailkit-users] Config problems - New users don't work

[Derek Weichenthal]

Hello,

I'm a new user to jailkit, previously this network was using a jail environment but it was built with an older package from a couple years ago and it will no longer create a user that works properly. I'm having some similar problems using the 2.11 release.

Following the README.txt included I can successfully create the jail environment and add sftp and scp support. I was able to add the user correctly, my /etc/passwd and /jail/etc/passwd are correct according to http://olivier.sessink.nl/jailkit/howtos_sftp_scp_only.html

I have edited /jail/etc/jailkit/jk_init.ini and added:
[jailtest]
paths = /usr/bin, /usr/lib
executables = /usr/lib/sftp-server, /usr/lib/scp
allow_word_expansion = 1
umask = 002

Ran killall command then ran jk_socketd to restart. Now at this point everything should be working according to the readme.
address@hidden:/jail/etc/jailkit# sftp address@hidden
Connecting to titan...
address@hidden's password:
Connection closed

>From /var/log/messages, I am not sure why jk_lsh is reporting 4 hours in the future, could this be the problem? If I try to use SSH instead of SCP I get the same message and it also reports 4 hours ahead.
Jun 10 10:21:08 titan jk_socketd[22109]: version 2.11, listening on socket /var/chroot/dev/log with rates [512:2048]/10.000000
Jun 10 10:21:08 titan jk_socketd[22109]: version 2.11, listening on socket /jail/dev/log with rates [512:2048]/10.000000
Jun 10 10:21:08 titan jk_socketd[22109]: version 2.11, socket /jail/dev/log is mentioned multiple times in config file
Jun 10 10:21:16 titan jk_chrootsh[22117]: now entering jail /jail for user jailtest (9041)
Jun 10 14:21:16 titan jk_lsh[22117]: jk_lsh version 2.11, started
Jun 10 14:21:16 titan jk_lsh[22117]: cannot find user info for USER jailtest: Success

I am unable to check /var/log/daemon.log or /var/log/auth.log as I do not have them on my system. If these logs would help I would need a hand setting them up as well to work with the jailkit.

Thanks for any help I can get on this,
Derek