Re: [Jailkit-users] jk_lsh auto-disconnecting ssh connection

[Olivier Sessink]

Jiho Kang wrote:
> Hi, I am running ubuntu 9.04 server with jailkit 2.10.
> 
> when I try to ssh login to a chrooted user using SecureCRT 6, jk_lsh
> disconnects the connection.
> this is what /var/log/auth.log says.
> 
>     Feb  4 13:05:11 cutty sshdfilt[6139]: DB:ACCEPT: user=test,
>     ip=***.***.***.***
>     Feb  4 13:05:11 cutty sshd: pam_unix(sshd:session): session opened
>     for user test by (uid=0)
>     Feb  4 13:05:11 cutty jk_chrootsh[14756]: now entering jail
>     /home/chroot2 for user test (1012)
>     Feb  4 13:05:11 cutty jk_lsh[14756]: jk_lsh version 2.10, started
>     Feb  4 13:05:11 cutty jk_lsh[14756]: WARNING: user test (1012) tried
>     to get an interactive shell session (/usr/sbin/jk_lsh), which is
>     never allowed by jk_lsh
>     Feb  4 13:05:11 cutty sshd: pam_unix(sshd:session): session closed
>     for user test
> 
> 
> hmm... it seems I "tried to get an interactive shell session" but can't
> find any relevant data on what that means.

it means that it blocks regular ssh shell access.

> SFTP is working fine and ssh works only when i change the users shell
> from /usr.sbin/jk_lsh to /bin/bash.

true, if you want to block bash use jk_lsh, if you want bash, don't use
jk_lsh because it will block bash.

regards,
        Olivier