topic Sftp with the chroot option in Operating System - Linux

Sftp with the chroot option

Victor Fridyev — Wed, 26 May 2010 14:10:50 GMT

Hi,

I'm trying to implement sftp with chroot on RHES 5.4 64 bit machine( 2.6.18-194.el5) .
I have a working procedure on RH4.6 32 bit (2.6.9-67.0.20.ELsmp), jailkit-2.1-1.el4.rf.i386.rpm, which has been built by S. Protter some years ago http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1274884868657+28353475&threadId=1119613 .
The procedure has been copied to RH5 machine with jailkit-2.5-1.el5.rf.x86_64.rpm, but it does not work: when one tries to do "sftp username@localhost" , the answer is "Connection closed" and not anticipated sftp prompt.
An attempt to use another approach, with restricted ssh: http://articles.techrepublic.com.com/5100-10878_11-6181828.html?tag=nl.e011 , gave the same result. But implementation of the same rssh procedure on RH4 machine works excellent.
Conclusion: Both jailkit and rssh don't work on RH5 and do work on RH4.

Did anybody try to build sftp with chroot on RH5 using jailkit or rssh ? I mean: did anybody succeed ?

TIA

Re: Sftp with the chroot option

Ivan Ferreira — Wed, 26 May 2010 15:40:53 GMT

Please see my post here:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1364984

Re: Sftp with the chroot option

Steven E. Protter — Wed, 26 May 2010 20:03:44 GMT

Shalom all,

Ivan: It's not apparent to me which of your posts in your thread you are recommending.

Victor,

1)Any message in /var/log/messages corresponding with the "Connection Closed" statement.

2)The choot add user script we wrote for the gate servers should be walked through and check that every directory and file in the user configuration has correct ownership and permissions. As I recall jailkit is very sensitive to the most minute discrepancy there.

3) Maybe a slightly earlier version of jailkit. There were several choices available when I did this and it may have taken more than one version to work.

Hope you are well.

Enjoying the allergy season here in Maumee Ohio.

SEP

Re: Sftp with the chroot option

Victor Fridyev — Fri, 28 May 2010 15:45:09 GMT

Thanks guys,

I don't want ( on this stage ) to install new Open SSH and this, as far as I understand is the main condition for chroot/sftp to work.
Investigations go on.