[Jailkit-users] Problem with jailed SFTP

[Saiid Paryavi]

After setting up jailkit to jail SFTP clients, SFTP session is 
immediately closed after connection has been established. System logs 
report the following:

May  3 12:37:22 temp jk_socketd[25119]: listening on socket 
/home/sftproot/dev/log with rates [512:2048]/10
May  3 12:37:22 temp jk_socketd[25119]: socket /home/sftproot/dev/log is 
mentioned multiple times in config file
May  3 12:37:31 temp sshd(pam_unix)[25125]: session opened for user XFJ 
by (uid=510)
May  3 12:37:31 temp jk_chrootsh[25126]: now entering jail 
/home/sftproot for user XFJ (510)
May  3 16:37:31 temp jk_lsh[25126]: jk_lsh, started
May  3 16:37:31 temp jk_lsh[25126]: executing command 
'/usr/libexec/openssh/sftp-server' for user XFJ (510)
May  3 12:37:31 temp sshd(pam_unix)[25125]: session closed for user XFJ

Any help would be appreciated.

~Saiid


Here are the relevant file snippets:

/etc/passwd:

XFJ:x:510:601::/home/sftproot/./home/XFJ:/usr/sbin/jk_chrootsh

=====

/etc/jailkit/jk_lsh.ini :

## example for a user
[XFJ]
paths= /usr/lib/
executables= /usr/libexec/openssh/sftp-server
allow_word_expansion = 1
umask = 002
#
##example for a group, there should be only 1 space inbetween the words!
[group EDS_ELIT]
paths = /usr/bin
executables= /usr/libexec/openssh/sftp-server
allow_word_expansion = 1

=====
/etc/jailkit/jk_chrootsh.ini:

## example for a user
#[test]
#env= DISPLAY, XAUTHORITY
#
##example for a group, there should be only 1 space inbetween the words!
#[group users]
#env = DISPLAY, XAUTHORITY
#

=====
/home/sftproot/etc/group:

root:x:0:root
users:x:100:
EDS_ELIT:x:601:

=====
/home/sftproot/etc/passwd:

root:x:0:0:root:/root:/bin/bash
XFJ:x:510:601::/home/XFJ:/usr/sbin/jk_lsh

=====
/home/sftproot/etc/jailkit/jk_lsh.ini:


[XFJ]
paths= /usr/lib/
executables= /usr/libexec/openssh/sftp-server, /usr/sbin/jk_lsh
allow_word_expansion = 1
umask = 002
#
##example for a group, there should be only 1 space inbetween the words!
#[group users]
#paths = /usr/bin
#executables = /usr/bin/cvs
#allow_word_expansion = 0

[group EDS_ELIT]
paths = /usr/bin, /usr/lib/
executables= /usr/bin/scp, /usr/libexec/openssh/sftp-server
allow_word_expansion = 1