Oliver,
We have had this issue happen again, and added a bug report to ISPConfig.
https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5852
Is it possible that with a second SSh user, Jailkit is resetting the user:group (and not resetting it back to root:root)?
We know how to fix this when it happens, so it is now no more than a minor annoyance, but both Jailkit and ISPConfig are such good software that we have an interest in helping keep them running well.
If you have any thoughts on this, please let us know. It only seems to happen when a jail has already been set up, and another SSH user is added to the jail.
Thanks and regards,
Bob S.
--
Bob Schuon / Senior Developer
Lounge Lizard Worldwide Inc.
- Best of Breed Since 1998
tel 1-888-444-0110 ext 108 | e-fax 1-888-308-8990 |
www.loungelizard.com
NYC
112 West 34th Street
18th Floor
New York, NY 10120
Long Island
31 West Main Street
Suite 212
Patchogue, NY 11772
Washington D.C. Metro
1101 Connecticut Avenue NW
Suite 450
Washington, DC 20036
Los Angeles - California
1100 Glendon Avenue
17th Floor
Los Angeles, CA 90024
Olivier,
Thank you for your reply! Unfortunately (or fortunately, for security’s sake), ISPConfig locks that webxxx folder, and a standard chown will fail, even with sudo/root.
But, good news! I found the article I was looking for, which shows how to (temporarily) remove the protection to fix the ownership/permissions.
https://popoleodesigns.com/unset-ispconfig-3-folder-security/
As soon as the ownership is fixed, the ssh works once more.
Thank you for your help, and your fantastic software!
Best Regards,
--
Bob Schuon / Senior Developer
Lounge Lizard Worldwide Inc.
- Best of Breed Since 1998
tel 1-888-444-0110 ext 108 | e-fax 1-888-308-8990 |
www.loungelizard.com
NYC
112 West 34th Street
18th Floor
New York, NY 10120
Long Island
31 West Main Street
Suite 212
Patchogue, NY 11772
Washington D.C. Metro
1101 Connecticut Avenue NW
Suite 450
Washington, DC 20036
Los Angeles - California
1100 Glendon Avenue
17th Floor
Los Angeles, CA 90024
No experience with ISPConfig, but if you have terminal access it is an easy fix.
you can run 'chown root:root /path/to/jail' and that will fix the problem. jk_check -j /path/to/jail will report if there are more issues.
If there are multiple directories affected, you can even run:
chown -R root:root /path/to/jail
chown jaileduser:group /path/to/jail/path/to/home
On 11-11-2020 23:02, Bob Schuon wrote:
Hi,
We are running ISPConfig, and one of the jails (webxxx) somehow is owned by the jailed user, rather than root:root. We thought there was a way to fix this, but we can’t seem to find the documentation for it online. Would anyone know how
to do this?
Basically, we /think/ the sequence was:
Change a bit in the chroot to make it no longer a chroot (or be able to edit it).
Fix the folder ownership.
Reset the bit to lock the jail again.
Does that sound familiar to anyone?
Thanks!
listinfo/jailkit-users