Restricted Telnet

[Anshumali]

Okay....i am stuck again.... :)

What i need is:
Create a user with shell accesss and should be able to do cd within his home directory only. Other words chrooting the home directory.
I have followed sugegstions in threads but somehow no luck.
Password file looks like:
anstest:*:105:20:Anshu Test Shell,,,:/home/anstest/./:/bin/sh

And the /etc/profile contains:

if [ "$LOGNAME" = anstest ]
then
chroot /home/anstest
fi

what is missing here? Anything else to configure.

OS 11.11

[Steven Schweda]

> what is missing here?

An explanation of what, exactly, "no luck"
means. What happens? What doesn't work?

[Ralf Seefeldt]

Hello Anshumali,

if you use an * in /etc/passwd, unles you don't use a secure system, you disable login for that user.

man passwd

What exactly are your problems? Can you log in? Do you have to many or to little permissions?

Bye
Ralf

[Ivan Ferreira]

I'm not sure if you can do this with telnet, with SSH is possible and you should by now, use SSH.

The chroot command requieres:

1- An chroot environment created
2- A command to execute

[spex]

Perhaps rsh (Restricted Shell) would be a better fit for your needs. See "rsh Restrictions" in the sh-posix(1) man for more information.

[Anshumali]

Yes Its a trusted System, that why password field is *
What doesnt work?:
Logging the same anstest user, user can navigate to all the file system. it doesnt show as homedir as chrooted directory.

rsh:
Yes...i gave it a try but it doesnt provide access to cd command. Is there anyway to provide access to cd command in rsh? User should be able to traverse down from his home directory, but not upwards...thats the reason i went for chroot method.

[Anshumali]

Ivan,

Any pointers/threads how to get this done with SSH. I would surely give it a try. Ofcourse, auditors will be happy as well. ;)

Thanks,
Anshu

[HGN]

Hi

Ours is also a trusted system but we have implemented with ssh (chroot'd env) amd know for sure it works.

Rgds

HGN

[Anshumali]

HGN,

Is there any doc to configure chrooted env with SSH or the above settings are similar with ur env and works well when SSH is installed. Any specific config in SSH?

[Anshumali]

i got
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1122269
will try it out....still appreciate if anyone can shed light on the original question :)

[rariasn]

Hi Anshumali,

/opt/ssh/README_chroot.html

rgs,

[Anshumali]

Syntax issue
/opt/ssh/README_chroot.html helped and the responses above