[Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 21

[Wei-Yen Tan]

Thanks Gavin and Oliver. 
@Oliver, I tried to add the null thing into it, but it stioll didn;t work...

@ Gavin Here is an entry in the auth.log that I noted.

Here is a entry in the log that I noted

Jul 31 09:27:02 xx1 jk_chrootsh[3332]: ERROR: failed to execute shell /home/sftproot/usr/sbin/jk_lsh for user xxx (1002), check the permissions and libraries of /home/sftproot//home/sftproot$
Jul 31 09:27:02 xx1 sshd[3331]: (pam_unix) session closed for user xxx

Also I have the permissions is:


lrwxrwxrwx 1 root root     19 2007-07-28 19:54 sftp-server -> openssh/sftp-server
-rwxr-xr-x 1 root root 43244 2007-02-20 01:44 sftp-server

I am wondering whether i have to reinitialize anything after each change I make?

I think I am getting closer. Thanks!

regards,

WY

On 7/31/07, address@hidden <address@hidden> wrote:

Send Jailkit-users mailing list submissions to
        address@hidden

To subscribe or unsubscribe via the World Wide Web, visit
         http://lists.nongnu.org/mailman/listinfo/jailkit-users
or, via email, send a message with subject or body 'help' to
        address@hidden

You can reach the person managing the list at
        address@hidden

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Jailkit-users digest..."


Today's Topics:

   1. Re: Re: Jailkit-users Digest, Vol 22, Issue 5 (Gavin Rogers)
   2. Re: Jailkit-users Digest, Vol 22, Issue 20 (Wei-Yen Tan)
   3. Re: Jailkit-users Digest, Vol 22, Issue 20 (Wei-Yen Tan)
   4. Re: Re: Jailkit-users Digest, Vol 22, Issue 20 (Olivier Sessink)


----------------------------------------------------------------------

Message: 1
Date: Sun, 29 Jul 2007 23:36:40 -0500
From: "Gavin Rogers" <address@hidden>
Subject: Re: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 5
To: address@hidden
Message-ID:
        <address@hidden >
Content-Type: text/plain; charset="iso-8859-1"

Wei-Yen,

What are the permissions on  '/usr/lib/openssh/sftp-server'? Also, do you
have that executable set up in your /etc/jailkit/jk_lsh.ini file? You need
something like this:

[username]
paths= /usr/bin, /usr/libexec
executables= /usr/bin/scp, /usr/libexec/sftp-server, /usr/bin/rsync

Let us know what that file looks like as well,

gavin


On 7/29/07, Olivier Sessink <address@hidden> wrote:
>
> Wei-Yen Tan wrote:
> > Hi there Oliver,
> >
> > Thank you for the reply. I was away for a while and just returned back
> > from a trip and just managed to have a look at this just now.
> >
> > Thanks for the link to the auth.log. I am kind of new and have learnt a
> > lot extra in terms of looking at logs for diagnosing linux issues. I
> > tracked the initial problem to a permission error...having to set the
> > executables correct and such. Now I get the message in the auth.log is:
> >
> >
> > Jul 28 22:55:09 xxx jk_chrootsh[26801]: now entering jail /home/sftproot
> > for user test (1002)
> > Jul 28 22:55:09 xxx jk_lsh[26801]: jk_lsh version 2.3, started
> > Jul 28 22:55:09 xxx jk_lsh[26801]: executing command
> > '/usr/lib/openssh/sftp-server' for user test (1002)
> > Jul 28 22:55:09 xxx sshd[26800]: (pam_unix) session closed for user test
>
> the jailkit configuration seems OK. Most common issue if sftp-server
> doesn't start is that /dev/null is missing in the jail. Can you check
> that?
>
> Olivier
>
>
> _______________________________________________
> Jailkit-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jailkit-users
>



--
http://vk6hgr.echidna.id.au/~gavin8or/
Gavin Rogers, full time problem solver.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.gnu.org/pipermail/jailkit-users/attachments/20070729/f3604887/attachment.html

------------------------------

Message: 2
Date: Tue, 31 Jul 2007 00:00:04 +1200
From: "Wei-Yen Tan" < address@hidden>
Subject: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 20
To: address@hidden
Message-ID:
        <address@hidden>
Content-Type: text/plain; charset="utf-8"

Hello Olivier,

You are correct..all i get in the /dev section is log and urandom

log has srw-rw-rw permissions on it and urandom has srw-rw-rw on it both
belonging to root. Thank you for the assistance.

On 7/30/07, address@hidden <
address@hidden> wrote:
>
> Send Jailkit-users mailing list submissions to
>         address@hidden
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         http://lists.nongnu.org/mailman/listinfo/jailkit-users
> or, via email, send a message with subject or body 'help' to
>         address@hidden
>
> You can reach the person managing the list at
>         address@hidden
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Jailkit-users digest..."
>
>
> Today's Topics:
>
>    1. Re: Re: Jailkit-users Digest, Vol 22, Issue 5 (Olivier Sessink)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 29 Jul 2007 13:35:40 +0200
> From: Olivier Sessink <address@hidden>
> Subject: Re: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 5
> To: address@hidden
> Message-ID: <address@hidden>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> Wei-Yen Tan wrote:
> > Hi there Oliver,
> >
> > Thank you for the reply. I was away for a while and just returned back
> > from a trip and just managed to have a look at this just now.
> >
> > Thanks for the link to the auth.log. I am kind of new and have learnt a
> > lot extra in terms of looking at logs for diagnosing linux issues. I
> > tracked the initial problem to a permission error...having to set the
> > executables correct and such. Now I get the message in the auth.log is:
> >
> >
> > Jul 28 22:55:09 xxx jk_chrootsh[26801]: now entering jail /home/sftproot
> > for user test (1002)
> > Jul 28 22:55:09 xxx jk_lsh[26801]: jk_lsh version 2.3, started
> > Jul 28 22:55:09 xxx jk_lsh[26801]: executing command
> > '/usr/lib/openssh/sftp-server' for user test (1002)
> > Jul 28 22:55:09 xxx sshd[26800]: (pam_unix) session closed for user test
>
> the jailkit configuration seems OK. Most common issue if sftp-server
> doesn't start is that /dev/null is missing in the jail. Can you check
> that?
>
> Olivier
>
>
>
>
> ------------------------------
>
> _______________________________________________
> Jailkit-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jailkit-users
>
>
> End of Jailkit-users Digest, Vol 22, Issue 20
> *********************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.gnu.org/pipermail/jailkit-users/attachments/20070731/a1ea8332/attachment.html

------------------------------

Message: 3
Date: Tue, 31 Jul 2007 00:03:06 +1200
From: "Wei-Yen Tan" <address@hidden>
Subject: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 20
To: address@hidden
Message-ID:
        <address@hidden >
Content-Type: text/plain; charset="utf-8"

what do i do? thanks

On 7/31/07, Wei-Yen Tan <address@hidden> wrote:
>
> Hello Olivier,
>
> You are correct..all i get in the /dev section is log and urandom
>
> log has srw-rw-rw permissions on it and urandom has srw-rw-rw on it both
> belonging to root. Thank you for the assistance.
>
> On 7/30/07, address@hidden <address@hidden
> > wrote:
> >
> > Send Jailkit-users mailing list submissions to
> >          address@hidden
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> >         http://lists.nongnu.org/mailman/listinfo/jailkit-users
> > or, via email, send a message with subject or body 'help' to
> >         address@hidden
> >
> > You can reach the person managing the list at
> >         address@hidden
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Jailkit-users digest..."
> >
> >
> > Today's Topics:
> >
> >    1. Re: Re: Jailkit-users Digest, Vol 22, Issue 5 (Olivier Sessink)
> >
> >
> > ----------------------------------------------------------------------
> >
> > Message: 1
> > Date: Sun, 29 Jul 2007 13:35:40 +0200
> > From: Olivier Sessink <address@hidden>
> > Subject: Re: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue 5
> > To: address@hidden
> > Message-ID: <address@hidden>
> > Content-Type: text/plain; charset=UTF-8; format=flowed
> >
> > Wei-Yen Tan wrote:
> > > Hi there Oliver,
> > >
> > > Thank you for the reply. I was away for a while and just returned back
> > > from a trip and just managed to have a look at this just now.
> > >
> > > Thanks for the link to the auth.log. I am kind of new and have learnt
> > a
> > > lot extra in terms of looking at logs for diagnosing linux issues. I
> > > tracked the initial problem to a permission error...having to set the
> > > executables correct and such. Now I get the message in the auth.logis:
> > >
> > >
> > > Jul 28 22:55:09 xxx jk_chrootsh[26801]: now entering jail
> > /home/sftproot
> > > for user test (1002)
> > > Jul 28 22:55:09 xxx jk_lsh[26801]: jk_lsh version 2.3, started
> > > Jul 28 22:55:09 xxx jk_lsh[26801]: executing command
> > > '/usr/lib/openssh/sftp-server' for user test (1002)
> > > Jul 28 22:55:09 xxx sshd[26800]: (pam_unix) session closed for user
> > test
> >
> > the jailkit configuration seems OK. Most common issue if sftp-server
> > doesn't start is that /dev/null is missing in the jail. Can you check
> > that?
> >
> > Olivier
> >
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > Jailkit-users mailing list
> > address@hidden
> > http://lists.nongnu.org/mailman/listinfo/jailkit-users
> >
> >
> > End of Jailkit-users Digest, Vol 22, Issue 20
> > *********************************************
> >
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.gnu.org/pipermail/jailkit-users/attachments/20070731/544e8075/attachment.html

------------------------------

Message: 4
Date: Mon, 30 Jul 2007 16:17:24 +0200 (CEST)
From: "Olivier Sessink" <address@hidden >
Subject: Re: [Jailkit-users] Re: Jailkit-users Digest, Vol 22, Issue
        20
To: address@hidden
Message-ID:
        < address@hidden>
Content-Type: text/plain;charset=iso-8859-1

> Hello Olivier,
>
> You are correct..all i get in the /dev section is log and urandom

jk_cp /home/sftproot /dev/null

that should create a /dev/null device in the jail

Olivier






------------------------------

_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users


End of Jailkit-users Digest, Vol 22, Issue 21
*********************************************