Chrooted SSH & ISPConfig

[SamTzu]

Question.

Does ISPConfig need pre-existing Chrooted SSH?
Does it create one?

[falko]

You must compile a new OpenSSH, as shown in chapter 2.1 on http://www.howtoforge.com/chroot_ssh_sftp_debian_etch

The rest is done by ISPConfig.

[SamTzu]

ok. thx.
Has anyone tried this with the new Ubuntu 8.04 LTS?

Sam

[falko]

Not yet, but I don't see any problem. :)

[SamTzu]

After trying to configure the script stops at PAM headers check and saiz...
configure: error: PAM headers not found
What could cause this?
Do I need to recreate the SSH certs?

[SamTzu]

My bad. Missing libs.
Ubuntu 8.04 LTS has libssl0.9.8 not .7 as in the howto.
Just replace the version and it should work.

[SamTzu]

Ok. Installed SSH chroot without errors but it does not seem to work in my ISPConfig installation.
Should I have created the chroot environment under /home/chroot?
Or maybe /var/www?
I notice there is no /var/www/web1/etc dir.
Without etc dir there cant be passwd file with /./web1 user.
How do I get ISPConfig to include those when new user is created?

[falko]

Did you set $go_info["server"]["ssh_chroot"] to 1 in /home/admispconfig/ispconfig/lib/config.inc.php?

[SamTzu]

Nope. : ) thx 4 the tip.