Re: [Jailkit-users] Problem with ssh connection on a jailed username

[OCEANET - Cédric BASSAGET]

I've tried to run jk_socketd with '-n' option, it gaves me this :

address@hidden githplus]# /usr/sbin/jk_socketd -n
opened /dev/log
while opening /home/jailtest/dev/log: No such file or directory
version 2.17, failed to create socket /home/jailtest/dev/log
version 2.17, listening on socket /srv/gan-w17-disk1/githplus/dev/log with rates [512:2048]/10.000000
version 2.17, socket /srv/gan-w17-disk1/githplus/dev/log is mentioned multiple times in config file

Regards,
Cédric

OCEANET
---------------------------------------------------------------
[AGENCE DU MANS]
7, rue des Frênes
ZAC de la Pointe
72190 SARGE LES LE MANS
[t] +33 (0)2.43.50.26.50
[f] +33 (0)2.43.72.21.14

[AGENCE D'ANGERS]
5, rue Fleming
Angers Technopole
49066 ANGERS
[t] +33 (0)2.41.19.28.65
[f] +33 (0)2.52.19.22.00

http://www.oceanet.com
http://www.oceanet-telecom.com

Le 11/02/2014 13:56, OCEANET - Cédric BASSAGET a écrit :

Hello,

I'm trying to jail an user on a centos 6.5 distro.

I've followed the example section of this page : http://olivier.sessink.nl/jailkit/jailkit.8.html

When I try to connect with that user (githplus) to my system (gan-w17), I just get the welcome message then a "Connection to <server> closed."

Looking into the logs of my server :

/var/log/secure :
Feb 11 13:52:40 gan-w17 sshd[13623]: Accepted keyboard-interactive/pam for githplus from <myIP> port 45858 ssh2
Feb 11 13:52:40 gan-w17 sshd[13623]: pam_unix(sshd:session): session opened for user githplus by (uid=0)
Feb 11 13:52:40 gan-w17 sshd[13628]: Received disconnect from <myIP>: 11: disconnected by user
Feb 11 13:52:40 gan-w17 sshd[13623]: pam_unix(sshd:session): session closed for user githplus

/var/log/messages :
Feb 11 13:52:40 gan-w17 jk_chrootsh[13629]: now entering jail /srv/gan-w17-disk1/githplus for user githplus (911) with arguments

In /etc/passwd I have :
githplus:x:911:911::/srv/gan-w17-disk1/githplus/./home/githplus:/usr/sbin/jk_chrootsh

I can't find why it does not work.
Can anybody help me please ?

Regards,
Cédric