RE: [Jailkit-users] help , Keith

[RodgerK]

Olivier;

Tried what you suggested, with and without a leading / in front of
/bin/bash in the passwd file, all the permissions every where are
execute for other here is what I get:


session opened for user root by rodgerk(uid=26)
Sep 13 08:18:42 fpsft sshd(pam_unix)[7655]: session opened for user mike
by (uid=0)
Sep 13 08:18:42 fpsft jk_chrootsh[7656]: now entering jail /home/jail
for user mike (500)
Sep 13 08:18:42 fpsft jk_chrootsh[7656]: ERROR: failed to execute shell
bin/bash for user mike (500), check the permissions and libraries of
/home/jail/bin/bash
Sep 13 08:18:42 fpsft sshd(pam_unix)[7655]: session closed for user mike
Sep 13 08:20:52 fpsft sshd(pam_unix)[7669]: session opened for user mike
by (uid=0)
Sep 13 08:20:52 fpsft jk_chrootsh[7670]: now entering jail /home/jail
for user mike (500)
Sep 13 08:20:52 fpsft jk_chrootsh[7670]: ERROR: failed to execute shell
bin/bash for user mike (500), check the permissions and libraries of
/home/jail/bin/bash
Sep 13 08:20:52 fpsft sshd(pam_unix)[7669]: session closed for user mike

-----Original Message-----
From: address@hidden
[mailto:address@hidden On Behalf Of
Olivier Sessink
Sent: Tuesday, September 12, 2006 5:23 PM
To: address@hidden
Subject: Re: [Jailkit-users] help , Keith

Stephen Tallowitz wrote:
> Hello Keith,
> 
> it seems to me from your comments and the log file that you're trying
to log into your account - using an interactive shell. You are typing
something like
> ssh address@hidden
> if I'm guessing correctly. This will not work, because jk_lsh is not
an interactive shell. There are two things you could do:
> 
> 1. Select bash as the login shell in the jail (bypassing jk_lsh). Put
/bin/bash instead of /usr/sbin/jk_lsh into /home/jail/etc/passwd
> 2. Supply bash as the command to execute to the ssh command:
>       ssh address@hidden 'bash'
> If you chose option (2), don't forget to put /bin/bash in
/home/jail/etc/jailkit/jk_lsh.ini

2 is a bit of a funny alternative, jk_lsh is designed as alternative for
bash if you want to disallow interactive shells. So if you want an
interactive shell just do 1 and don't use jk_lsh.

regards,
        Olivier


_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users