[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Jailkit-users] jk_lsh auto-disconnecting ssh connection
From: |
Olivier Sessink |
Subject: |
Re: [Jailkit-users] jk_lsh auto-disconnecting ssh connection |
Date: |
Thu, 04 Feb 2010 08:28:11 +0100 |
User-agent: |
Thunderbird 2.0.0.23 (X11/20090817) |
Jiho Kang wrote:
> Hi, I am running ubuntu 9.04 server with jailkit 2.10.
>
> when I try to ssh login to a chrooted user using SecureCRT 6, jk_lsh
> disconnects the connection.
> this is what /var/log/auth.log says.
>
> Feb 4 13:05:11 cutty sshdfilt[6139]: DB:ACCEPT: user=test,
> ip=***.***.***.***
> Feb 4 13:05:11 cutty sshd: pam_unix(sshd:session): session opened
> for user test by (uid=0)
> Feb 4 13:05:11 cutty jk_chrootsh[14756]: now entering jail
> /home/chroot2 for user test (1012)
> Feb 4 13:05:11 cutty jk_lsh[14756]: jk_lsh version 2.10, started
> Feb 4 13:05:11 cutty jk_lsh[14756]: WARNING: user test (1012) tried
> to get an interactive shell session (/usr/sbin/jk_lsh), which is
> never allowed by jk_lsh
> Feb 4 13:05:11 cutty sshd: pam_unix(sshd:session): session closed
> for user test
>
>
> hmm... it seems I "tried to get an interactive shell session" but can't
> find any relevant data on what that means.
it means that it blocks regular ssh shell access.
> SFTP is working fine and ssh works only when i change the users shell
> from /usr.sbin/jk_lsh to /bin/bash.
true, if you want to block bash use jk_lsh, if you want bash, don't use
jk_lsh because it will block bash.
regards,
Olivier