[Jailkit-users] FW: scp only library problems

[Charlton Purvis]

I apologize if this got sent through multiple times.

> Hello:
> 
> I am having a problem w/ the chroot, scp-only install of jailkit.  I have
> followed the instructions from here,
> http://olivier.sessink.nl/jailkit/howtos_sftp_scp_only.html.
> Incidentally, shouldn't the "jk_jailuser --jail=/home/jail mike" be "
> jk_addjailuser ..."?
> 
> My problem is that when I try to scp IN to this box, I get a library error
> that shows up on my client:
> 
> /usr/bin/scp: error while loading shared libraries: libkrb5.so.3: cannot
> open shared object file: No such file or directory
> 
> And my {jail_home}/etc/jailkit/jk_lsh.ini looks like:
> 
> [group users]
> paths = /usr/bin, /usr, /usr/kerberos, /usr/kerberos/lib executables =
> /usr/bin/scp
> 
> Because an ldd of {jail_home}/usr/bin/scp produces:
> 
>         libresolv.so.2 => /lib/libresolv.so.2 (0x00e15000)
>         libutil.so.1 => /lib/libutil.so.1 (0x008ff000)
>         libz.so.1 => /usr/lib/libz.so.1 (0x004be000)
>         libnsl.so.1 => /lib/libnsl.so.1 (0x00b9c000)
>         libcrypto.so.4 => /lib/libcrypto.so.4 (0x0057b000)
>         libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x00e58000)
>         libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3
> (0x00111000)
>         libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x00123000)
>         libc.so.6 => /lib/tls/libc.so.6 (0x00729000)
>         libgssapi_krb5.so.2 => /usr/kerberos/lib/libgssapi_krb5.so.2
> (0x004ab000)
>         libdl.so.2 => /lib/libdl.so.2 (0x00f46000)
>         /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x006e2000)
> 
> So the libkrb5.so.3 is in /usr/kerberos/lib/ which is specified in my
> jk_lsh.ini, but why isn't it finding it?  All of these libs were copied
> over using jk_init.  The libkrb5.so.3 turns out to be a symbolic link to
> libkrb5.so.3.1, but it is also in the same dir.
> 
> Any ideas?
> 
> Red Hat Enterprise Linux ES release 3 (Taroon Update 6)
> 
> Many thanks.
> 
> Charlton