Re: [Jailkit-users] Can't get logging working

[Scott Ruckh]

This is what you said Hi
> I believe your using the wrong shell.  That is what it
> is telling you :)  jk_lsh is a very limited
> non-interactive shell.  I'm sure you have read that in
> your error logs enough.
>
> Try adjusting your passwd files inside and outside the
> jail.  Here is my /etc/passwd or part of it
>
> tousant:x:567:568::/home/jail/./home/tousant:/usr/sbin/jk_chrootsh
> backin:x:568:569::/home/jail/./home/backin:/usr/sbin/jk_chrootsh
> muukct:x:569:570::/home/jail/./home/muukct:/usr/sbin/jk_chrootsh
>
> Now here is my /home/jail/etc/passwd or part of it
>
> tousant:x:567:568::/home/tousant:/bin/bash
> backin:x:568:569::/home/backin:/bin/bash
> muukct:x:569:570::/home/muukct:/bin/bash
>
> That should make things clear enough for you.
>
>
> --- yellow protoss <address@hidden> wrote:
>
>> help:
>>
>> jk_init -v /home/chrootusers/ sftp
>> /home/chrootusers/lib/libnss_dns.so.2 exists
>> /home/chrootusers/etc/resolv.conf exists
>> /home/chrootusers/etc/host.conf exists
>> /home/chrootusers/etc/hosts exists
>> /home/chrootusers/etc/protocols exists
>> /home/chrootusers/lib/libnsl.so.1 exists
>> /home/chrootusers/lib/libnss_compat.so.2 exists
>> /home/chrootusers/lib/libnss_files.so.2 exists
>> /home/chrootusers/etc/nsswitch.conf exists
>> /home/chrootusers/usr/lib/sftp-server exists
>> source file /usr/libexec/openssh/sftp-server does
>> not exist
>> source file /usr/lib/misc/sftp-server does not exist
>> device /home/chrootusers/dev/urandom does exist
>> already
>> device /home/chrootusers/dev/null does exist already
>>
>>
>> On Sun, May 11, 2008 at 10:49 PM, yellow protoss
>> <address@hidden>
>> wrote:
>>
>> > Hello,
>> >
>> > This guy has the same problem than me.
>> >
>>
>

SFTP most certainly works with jailkit.  I believe several people have it
running fine in their environments.  Plus there have been multiple solutions
people have offered to you; which it is unclear if you have implemented.

Possibly in your situation you might try using restricted shell (RSSH)
http://www.pizzashack.org/rssh/?  Maybe it will be easier for you to
implement, and possibly there is a native package already built for your
distro.