Re: [Jailkit-users] SSH Problems

[Olivier Sessink]

Jon Gullidge wrote:
> It was in /etc/shells but hadn't given itself a new line so had joined 
> with the last line. I fixed that but it's made no difference. Although 
> I'm unsure if I need to reload/restart anything? I did reload sshd but 
> not changed.

some pam configuration require an entry in /etc/shells. I don't think 
something needs to be restarted for pam.

> The only logging from jk is on a successful SU:
> Nov  8 13:22:58 crispycrisp su[21351]: Successful su for javadk by root
> Nov  8 13:22:58 crispycrisp su[21351]: + pts/1 root:javadk
> Nov  8 13:22:58 crispycrisp su[21351]: pam_unix(su:session): session 
> opened for user javadk by root(uid=0)
> Nov  8 13:22:58 crispycrisp jk_chrootsh[21352]: now entering jail 
> /home/jail for user javadk (5509)
>
> Via SSH there is no jk log:
> Nov  8 13:33:05 crispycrisp sshd[22569]: Accepted 
> keyboard-interactive/pam for javadk from 127.0.0.1 port 52381 ssh2
> Nov  8 13:33:05 crispycrisp sshd[22569]: pam_unix(sshd:session): session 
> opened for user javadk by (uid=0)
> Nov  8 13:35:56 crispycrisp sshd[22569]: pam_unix(sshd:session): session 
> closed for user javadk
> Nov  8 13:36:43 crispycrisp sshd[23000]: error: PAM: Authentication 
> failure for javadk from localhost
>
> I turned debug3 loglevel on for SSHd. It doesn't really show a lot, but 
> here it is incase it shows you more than it does me:

my feeling is that there is something in the pam configuration that is 
causing this. pam can have different settings for different types of 
logins. But I don't know exactly which setting... Check the different 
files in /etc/pam.d/

regards,
        Olivier