jailkit-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Jailkit-users] Jailkit with Likewise Open - abort, failed to find u


From: Olivier Sessink
Subject: Re: [Jailkit-users] Jailkit with Likewise Open - abort, failed to find user in /jail/etc/passwd
Date: Sun, 01 Sep 2013 17:26:21 +0200
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130804 Thunderbird/17.0.8

On 08/12/2013 01:41 PM, mark wrote:
> Hello.
>
> I'm currently setting up a Linux server so that users can login with their
> AD username and password.
>
> Running Ubuntu Server 12.04: Linux 3.2.0-51-generic #77-Ubuntu SMP x86_64
> GNU/Linux
> Running Jailkit 2.16.
>
> Likewise Open have been setup correctly and I've managed to login without
> any issues before installing Jailkit.
>
> Likewise Open configuration:
> $ sudo lwconfig --dump
> HomeDirPrefix "/jail/./home/"
> HomeDirTemplate "%H/likewise-open/%D/%U"
> LoginShellTemplate "/usr/sbin/jk_chrootsh"
>
> Jail passwd:
> $ sudo cat /jail/etc/passwd
> root:x:0:0:root:/root:/bin/bash
> test:x:2061005014:2060976641:Test
> Testesen:/home/likewise-open/HIVE/test:/bin/bash
>
> Jail group:
> ~$ sudo cat /jail/etc/group
> root:x:0:
> domain^users:x:2060976641:test
>
> auth.log:
> Aug 12 12:58:22 x sshd[8863]: Accepted keyboard-interactive/pam for tteste
> from ipv6 port 18782 ssh2
> Aug 12 12:58:22 x sshd[8863]: pam_unix(sshd:session): session opened for
> user test by (uid=0)
> Aug 12 12:58:23 x jk_chrootsh[9007]: now entering jail /jail for user tteste
> (2061005014) with arguments
> Aug 12 12:58:23 x jk_chrootsh[9007]: abort, failed to find user 2061005014
> in /jail/etc/passwd
>
> The session closes as soon as I login.
>
> What am I doing wrong? Likewise Open doesn't create any local users, it uses
> pam to authenticate against AD.
>
> I also tried adding skip_injail_passwd_check to jk_uchroot.ini, but that
> didn't change the issue:
> $ sudo cat /etc/jailkit/jk_uchroot.ini
> [group domain^users]
> skip_injail_passwd_check = 1

I guess you should not add that to jk_uchroot.ini but jk_chrootsh.ini if
jk_chrootsh is complaining.

Olivier

-- 
Bluefish website http://bluefish.openoffice.nl/
Blog http://oli4444.wordpress.com/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]