Re: [Jailkit-users] jk_lsh.ini -- Primary / Secondary groups [WORKING]

[Scott Ruckh]

This is what you said Olivier Sessink
> Scott Ruckh wrote:
>
>> Here is the the jk_lsh.ini file:
>>
>> [DEFAULT]
>> executables = /usr/bin/scp, /usr/libexec/openssh/sftp-server
>> paths = /usr/bin/, /usr/lib, /usr/libexec/openssh
>> allow_word_expansion = 1
>>
>> [group jkbash]
>> executables = /usr/bin/bash, /usr/bin/scp,
>> /usr/libexec/openssh/sftp-server
>> paths = /usr/bin/, /usr/lib, /usr/libexec/openssh
>> allow_word_expansion = 1
>>
>> [group jksftp]
>> executables = /usr/bin/scp, /usr/libexec/openssh/sftp-server
>> paths = /usr/bin, /usr/libexec/openssh
>> allow_word_expansion = 1
>
> hmm funny, if I copy and paste this into my jk_lsh.ini the DEFAULT
> section is correctly used.
>
> Which version of jailkit are you using?
>

Maybe I need to go back and review the documentaion, because I now have
this working.

I copied the most recently compiled version of jk_lsh from /usr/sbin to
the jail's /usr/sbin directory.

I thought running the new jk_init would do this for me.  I have not looked
at the code, but does the jk_init not copy jk_lsh if the file already
exists?

As this was an upgraded installation and not a new installation maybe that
is where the difference is between our systems.

Now with the new jk_lsh copied into the jail I now get the "jk_lsh version
2.1, started message" in my messages log.  Also, the user's session is
correctly initiated using the [DEFAULT] section from the jk_lsh.ini file.

Thanks.
Scott