Re: [Jailkit-users] Unable to start any programs

[Mats Ahlgren]

Thanks for the reply.

I ended up creating the chroot by hand from scratch and ended up having the 
same problems -- I think it was a problem with not having the libnss* files 
from both /lib and /lib64 put into chroot/lib and chroot/lib64.

Best wishes,
Mats

On Thursday 31 May 2007 12:35:16 Olivier Sessink wrote:
> Mats Ahlgren wrote:
> > Hello,
> > 
> > I followed the tutorial at
> > http://olivier.sessink.nl/jailkit/howtos_sftp_scp_only.html
> > 
> > The result is that attempting to ssh/sftp/anything yields the
> > following results: - I login successfully, see the welcome message,
> > and get immediately disconnected (disconcerting, since I didn't allow
> > ssh...) - the following is logged in /var/log/messages
> > 
> > ---------- begin logs (/var/log/messages) ----------- Accepted
> > keyboard-interactive/pam for ssh guest from 127.0.0.1 port 45083 ssh2
> > 
> > 
> > sshd[25734]: subsystem request for sftp
> > 
> > jk_chrootsh[25735]: now entering jail /home/jail for user sshguest
> > (1002)
> > 
> > jk_lsh[25735]: jk_lsh version 2.3, started
> > 
> > jk_lsh[25735]: cannot find user name for uid 1002: Success
> 
> check /home/jail/etc/passwd, does uid 1002 exist as user?
> 
> how about your jk_init.ini, the defaults are for a 32 bit Debian or
> Ubuntu system. Do you have a 64bit system? You use Suse: are the libnss
> libraries (usually /lib/libnss*) available in the jail?
> 
> > Also, I assume one has to run jk_socketd as root? (above logs are
> > with jk_socketd running -- didn't see anything, and I don't have an
> > auth.log; running Suse 10.2)
> 
> the Debian auth.log is in Suse in /var/log/messages. jk_socketd has to 
> run as root indeed, it changes to nobody after opening the sockets.
> 
> The fact that you see logging from jk_lsh in the jail means that your 
> logging is working OK.
> 
> regards,
>       Olivier
> 
> 
> _______________________________________________
> Jailkit-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/jailkit-users
>

signature.asc
Description: This is a digitally signed message part.