Sftp with the chroot option

[Victor Fridyev]

Hi,

I'm trying to implement sftp with chroot on RHES 5.4 64 bit machine( 2.6.18-194.el5) .
I have a working procedure on RH4.6 32 bit (2.6.9-67.0.20.ELsmp), jailkit-2.1-1.el4.rf.i386.rpm, which has been built by S. Protter some years ago http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1274884868657+28353475&threadId=1119613 .
The procedure has been copied to RH5 machine with jailkit-2.5-1.el5.rf.x86_64.rpm, but it does not work: when one tries to do "sftp username@localhost" , the answer is "Connection closed" and not anticipated sftp prompt.
An attempt to use another approach, with restricted ssh: http://articles.techrepublic.com.com/5100-10878_11-6181828.html?tag=nl.e011 , gave the same result. But implementation of the same rssh procedure on RH4 machine works excellent.
Conclusion: Both jailkit and rssh don't work on RH5 and do work on RH4.

Did anybody try to build sftp with chroot on RH5 using jailkit or rssh ? I mean: did anybody succeed ?

TIA

[Ivan Ferreira]

Please see my post here:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1364984

[Steven E. Protter]

Shalom all,

Ivan: It's not apparent to me which of your posts in your thread you are recommending.

Victor,

1)Any message in /var/log/messages corresponding with the "Connection Closed" statement.

2)The choot add user script we wrote for the gate servers should be walked through and check that every directory and file in the user configuration has correct ownership and permissions. As I recall jailkit is very sensitive to the most minute discrepancy there.

3) Maybe a slightly earlier version of jailkit. There were several choices available when I did this and it may have taken more than one version to work.

Hope you are well.

Enjoying the allergy season here in Maumee Ohio.

SEP

[Victor Fridyev]

Thanks guys,

I don't want ( on this stage ) to install new Open SSH and this, as far as I understand is the main condition for chroot/sftp to work.
Investigations go on.