Jailed SSH users just exit.

[xrstokes]

I'll ook into that but i'd love to solve this issue first. I clean installed again and now the log looks abit different but essentially the same. I'm pulling my hair out over this one.

Dec 29 23:22:45 webserv2 sshd[6775]: Accepted keyboard-interactive/pam for cocwarragul1 from 110.232.244.1 port 57721 ssh2
Dec 29 23:22:45 webserv2 systemd-logind[1003]: New user web1 logged in.
Dec 29 23:22:45 webserv2 systemd-logind[1003]: New session 35 of user web1.
Dec 29 23:22:45 webserv2 jk_chrootsh[6786]: abort, effective user ID is not 0, possibly jk_chrootsh is not setuid root
Dec 29 23:22:45 webserv2 systemd-logind[1003]: Removed session 35

[xrstokes]

this also happens if i follow these instructions before installing ispconfig.

http://olivier.sessink.nl/jailkit/ho...oot_shell.html

or these instructions

http://realtechtalk.com/jailkit_for_...-1017-articles

it must be a bug between jailkit and opensuse12.1. where should i go looking next.

[xrstokes]

Does anyone know if selinux needs to be disabled or something like that. i didn't enable it but maybe it is by default?
I've moved over to try Ubuntu now. Half way through running it up now. After 3 years of love and torture it might be time to move away from the green team.

[falko]

Originally Posted by xrstokes

Does anyone know if selinux needs to be disabled or something like that. i didn't enable it but maybe it is by default?

Yes, it needs to be disabled, and yes, it is on by default.

[xrstokes]

No luck. It was off already. I'll post back if i have any luck. Moving on to try and set up ftps. Using filezilla. not had any luck with that yet either. explicid gives the following.

Response: 220 You will be disconnected after 15 minutes of inactivity.
Command: AUTH TLS
Response: 500 This security scheme is not implemented
Command: AUTH SSL
Response: 500 This security scheme is not implemented

implicid gives nothing either. i havn't started looking into it yet.

[xrstokes]

Got the ftps working. just needed to open the passive port range in the firewall. thanks for all the help so far. moving on to the next hurdle.