Re: [Jailkit-users] JailKit and SFTP

[Topher Fangio]

I haven't specifically enabled logging, however, the following appears in the
log when I attempt to sftp into the box using a jailed account:

    Nov 20 16:07:49 pharos360-production sshd[1465]: Accepted password for demo from 150.252.169.7 port 63972 ssh2
    Nov 20 16:07:49 pharos360-production sshd[1469]: subsystem request for sftp
    Nov 20 16:07:49 pharos360-production jk_chrootsh[1472]: now entering jail /home/jails/demo for user demo (1001)

It appears to work, except that it immediately kicks me out and says

    Connecting to myserver.com...
    address@hidden's password: 
    Connection closed

I have removed my actual URL. I imagine the problem is something with the
way that I have setup SSH/SFTP on the actual server, but I can do both just
fine with a regular account. On a jailed account, I can SSH but not SFTP.

I'm happy to provide any logs/config files if you can point me in the right
direction.

Thanks very much for your assistance!

Topher

On Thu, Nov 19, 2009 at 8:50 AM, Luiz Casey <address@hidden> wrote:

Following the instructions http://olivier.sessink.nl/jailkit/howtos_ssh_only.html . Users can still sftp onto the system and transverse the chroot/jail. So it technically is not a ssh only howto. People would need to either disable sftp subsystem completely or run two instances of ssh one with sftp enable another with it disabled. If you could put "subsystem" within a match directive would be even better.

-----Original Message-----
From: jailkit-users-bounces+luiz.casey=villanova.edu@nongnu.org [mailto:jailkit-users-bounces+luiz.casey=villanova.edu@nongnu.org] On Behalf Of Olivier Sessink
Sent: Wednesday, November 18, 2009 2:41 AM
To: address@hidden
Subject: Re: [Jailkit-users] JailKit and SFTP

Topher Fangio wrote:
> Hello all,
>
> I am using JailKit and finally got everything setup like I wanted. I
> have read and
> reread the article
> <http://olivier.sessink.nl/jailkit/howtos_sftp_scp_only.html> about
> using JailKit and scp/sftp but still seem to be having some
> troubles. I can SSH into the jailed account and my primary (non-jailed)
> account
> can SSH and SFTP, so I know I must be doing something wrong. Below is my
> process for creating a new account:
[..]

what is the exact problem? does ftp not work, or is the problem that ssh
works? Is there anything useful in the logs? `grep jk_ /var/log/*` Did
you enable logging in the jail (jk_socketd or syslog)?

Olivier




_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users


_______________________________________________
Jailkit-users mailing list
address@hidden
http://lists.nongnu.org/mailman/listinfo/jailkit-users

-- 
Topher Fangio

System Architect
Pharos Resources

office: 325.480.2627
mobile: 325.660.7141