Re: [Jailkit-users] Can't login - Connection dropped

[Richard Scott]

Hi,

I think you are running a restricted chrooted shell which limits what files can be executed.

Try editing /etc/jailkit/jk_lsh.ini to enable access to the required binaries or try chaging the shell in /jail/etc/passwd to be bash rather than jk_lsh.

Rich

On 26/03/2013 01:13 PM, address@hidden wrote:

> I'm attempting to use Jailkit on Suse Enterprise 11 R2 unsuccessfully.   I've created a jail at /jail and a user named test within the group uploaders.   This user should only have access to sftp. 
>
> I've done the following: 
> 1) Edited jk_init.ini.   I've changed the paths assignment within the [sftp] section to include /usr/lib64/ssh/sftp-server. 
> 2) jk_init -v -j /jail sftp scp 
> 3) jk_init -v -j /jail jk_lsh 
> 4) jk_jailuser -v -j /jail test 
>
> When I attempt to sftp using the user test the connection is dropped immediately after login.   The following appears in the logs: 
> Mar 26 08:46:57 files sshd[10679]: Accepted keyboard-interactive/pam for test from 10.1.1.10 port 63647 ssh2 
> Mar 26 08:46:57 files sshd[10686]: subsystem request for sftp 
> Mar 26 08:46:57 files jk_chrootsh[10687]: now entering jail /jail for user test (1001) with arguments -c /usr/lib64/ssh/sftp-server 
> Mar 26 08:46:57 files sshd[10686]: Received disconnect from 10.1.1.10: 11: disconnected by user 
>
> The data for this user in /etc/passwd and /jail/etc/passwd looks fine.   
>
> /etc/passwd: 
> test:1001:1000::/jail/./home/test:/usr/sbin/jk_chrootsh 
>
> /jail/etc/passwd: 
> test:1001:1000::/home/test:/usr/sbin/jk_lsh 
>
> Can anyone give me any suggestions regarding what I've done incorrectly?   I can't seem to locate this problem. 
>
> Thanks, 
> Bob 
>
>
> Bob Dushok
>  Director of Enterprise Systems and Computer Labs
>  Luzerne County Community College
>
>  1-800-377-5222 ext 7327
>  address@hidden