Re: [Jailkit-users] Problems configuring in Suse 10.2

[Olivier Sessink]

Jere Retzer wrote:

> Mar  6 14:05:51 thinkpad sshd[14082]: subsystem request for sftp
> Mar  6 14:05:51 thinkpad jk_chrootsh[14083]: now entering jail /home/jail for 
> user lcmc (1002)
> Mar  6 14:05:51 thinkpad jk_chrootsh[14083]: abort, chdir(/home/lcmc) failed 
> inside the jail /home/jail: Permission denied, check the permissions for 
> /home/jail//home/lcmc
> Mar  6 14:06:25 thinkpad sshd[14086]: Accepted keyboard-interactive/pam for 
> mike from 127.0.0.1 port 17037 ssh2
> Mar  6 14:06:25 thinkpad sshd[14089]: subsystem request for sftp
> Mar  6 14:06:25 thinkpad jk_chrootsh[14090]: now entering jail /home/jail for 
> user mike (1001)
> Mar  6 14:06:25 thinkpad jk_chrootsh[14090]: abort, chdir(/home/mike) failed 
> inside the jail /home/jail: Permission denied, check the permissions for 
> /home/jail//home/mike
> 
> So I gave the user rwx (they were previously rw) for their home directories 
> and now the passwords fail:
> 
> Mar  6 14:12:22 thinkpad sshd[14106]: error: PAM: Authentication failure for 
> lcmc from localhost
> Mar  6 14:12:46 thinkpad sshd[14113]: error: PAM: Authentication failure for 
> mike from localhost

hmm that is really weird: jk_chrootsh runs *after* authentication, so
the authentication must be good if you see logging from jk_chrootsh..

BUT: PAM might be configured to block access to home directories that
have incorrect ownership or permissions as well, can you check your PAM
configuration, and post the permissions of the home directories?

ls -l /home/jail/home

regards,
        Olivier