Re: [Jailkit-users] RE: Jailkit-users Digest, Vol 9, Issue 16

[Olivier Sessink]

Dex Chen wrote:
> I was able to login if I use "chroot shell" instead of jk_lsh.

you mean bash as shell inside the jail? bash doesn't check the user ID 
or group ID. jk_lsh needs to check them in order to correctly read its 
config file.

> I am new to jailkit, and I did not see any doc or samples on how to use
> the jk_lsh after you configured it.  I am assuming that a jailed user
> with jk_lsh can login through ssh as other regular shell, such as "ssh
> address@hidden".

jk_lsh cannot be used as interactive shell. it can only be used for 
programs such as cvs, scp, rsync, and sftp that run over a ssh channel.

> Another question: how a jailed user account to change it's passwd?

you cannot with the regular mechanism, because the password file is 
outside the jail.

regards,
        Olivier