Hello,
I'm trying to move a user into jailkit, restricted to sftp connections.
I've actually moved myself in as a test case, and from another server
I can sftp sucessfully (note I'm running command line sftp on a Solaris
client to reach my server with jailkit, which is redhat linux):
-bash-3.00$ sftp elndz01m
Connecting to elndz01m...
The authenticity of host 'elndz01m
RSA key fingerprint is
Are you sure you want to continue connecting (yes/no)? yes
Failed to add the host to the list of known hosts
(/export/home/pmitchel/.ssh/known_hosts).
address@hidden's password:
sftp> ls
.
..
.bash_history
pmitchel
sftp>
My entry in the /etc/passwd file is:
pmitchel:x:11xxx:11xxx:Paul
Mitchell:/home/jail/./home/pmitchel:/usr/sbin/jk_chrootsh
(note: I x'd out a few numbers for paranoidal sake!^)
Here's the user I'm trying to ge in:
grep faxian /etc/passwd
faxian:x:16xxxx:16xxxx:Faxian
Yang:/home/jail/./home/faxian:/usr/sbin/jk_chrootsh
my /etc/jailkit/jk_lsh.ini looks like:
cat /etc/jailkit/jk_lsh.ini
## example for a user
[DEFAULT]
paths= /usr/lib/
executables= /usr/lib/sftp-server
allow_word_expansion = 0
umask = 002
#
## example for a user
[faxian]
paths= /usr/lib/
executables= /usr/lib/sftp-server
allow_word_expansion = 0
umask = 002
## example for a user
[pmitchel]
paths= /usr/lib/
executables= /usr/lib/sftp-server
allow_word_expansion = 0
umask = 002
#
##example for a group, there should be only 1 space inbetween the words!
#[group users]
#paths = /usr/bin
#executables = /usr/bin/cvs
#allow_word_expansion = 0
#environment= HELIX_PATH=/opt/RealPlayer/, TMP=/tmp/
[group admission]
paths= /usr/bin, /usr/lib/
executables= /usr/bin/scp, /usr/lib/sftp-server,
/usr/lib/openssh/sftp-server, /usr/libexec/sftp-server
address@hidden jailkit]#
Curiously, I get the following errors:
Oct 21 14:34:14 elndz01m rpc.idmapd[8656]: nss_getpwnam: name
'address@hidden' does not map into domain 'localdomain'
Oct 21 15:25:50 elndz01m jk_chrootsh[30657]: now entering jail /home/jail for
user faxian (164890)
Oct 21 15:48:09 elndz01m jk_chrootsh[30715]: now entering jail /home/jail for
user faxian (164890)
Oct 21 15:48:18 elndz01m jk_chrootsh[30723]: now entering jail /home/jail for
user faxian (164890)
Oct 22 11:23:59 elndz01m jk_chrootsh[2090]: now entering jail /home/jail for
user faxian (164890)
Oct 22 11:25:09 elndz01m jk_chrootsh[2100]: now entering jail /home/jail for
user faxian (164890)
Oct 23 12:02:27 elndz01m jk_chrootsh[6948]: now entering jail /home/jail for
user faxian (164890)
Oct 23 12:03:00 elndz01m jk_chrootsh[6958]: now entering jail /home/jail for
user faxian (164890)
Oct 23 12:03:37 elndz01m jk_chrootsh[6969]: now entering jail /home/jail for
user faxian (164890)
Oct 23 12:07:30 elndz01m jk_chrootsh[7049]: now entering jail /home/jail for
user faxian (164890)
Oct 23 16:07:30 elndz01m jk_lsh[7049]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 13:42:03 elndz01m jk_chrootsh[7472]: now entering jail /home/jail for
user faxian (164890)
Oct 23 17:42:03 elndz01m jk_lsh[7472]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 13:42:39 elndz01m jk_chrootsh[7480]: now entering jail /home/jail for
user faxian (164890)
Oct 23 17:42:39 elndz01m jk_lsh[7480]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 13:43:54 elndz01m jk_chrootsh[7490]: now entering jail /home/jail for
user faxian (164890)
Oct 23 17:43:54 elndz01m jk_lsh[7490]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 13:45:21 elndz01m jk_chrootsh[7502]: now entering jail /home/jail for
user faxian (164890)
Oct 23 17:45:21 elndz01m jk_lsh[7502]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 14:20:29 elndz01m jk_chrootsh[7617]: now entering jail /home/jail for
user faxian (164890)
Oct 23 18:20:29 elndz01m jk_lsh[7617]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 14:21:14 elndz01m jk_chrootsh[7628]: now entering jail /home/jail for
user faxian (164890)
Oct 23 18:21:14 elndz01m jk_lsh[7628]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
Oct 23 15:08:08 elndz01m jk_chrootsh[7833]: now entering jail /home/jail for
user faxian (164890)
Oct 23 19:08:08 elndz01m jk_lsh[7833]: did neither find a section 'faxian',
nor 'group faxian' nor 'DEFAULT' in configfile /etc/jailkit/jk_lsh.ini
I'm confused, I have both a DEFAULT and faxian entry in the file.
Any ideas?
Thanks,
Paul Mitchell
==============================================================================
Paul Mitchell
Enterprise Systems
email: address@hidden
NOTE: new location: 440 Franklin, cubby 1213
NOTE: new desk phone: 919 962-2521 (Is here!^)
==============================================================================
_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users