Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 17th March 2012, 10:14
sjau sjau is offline
Local Meanie
 
Join Date: Apr 2006
Location: Switzerland
Posts: 1,146
Thanks: 4
Thanked 55 Times in 51 Posts
Default Jailkit SSH User access to /var/www/domain.com ?

Hi there

I like SSH access and also use SCP to transfer files usually. So it's good to just have one login but I would like to restrict the user just to /var/www/domain.com.

However I can't seem to get this to work.

In the System Settings -> Server Configuration -> Server -> Jailkit

I did set Jailkit chroot home to '/'

The ssh user has jailkit enabled and under options the folder is set to:

'/var/www/clients/client1/web6'


cat /etc/passwd returns this:

SSHUSER:x:5008:5006::/var/www/clients/client1/web6/./:/usr/sbin/jk_chrootsh

and the actual folder user is:
web6:x:5008:5006::/var/www/clients/client1/web6/./:/bin/bash

However when I try to login, I get:

Mar 17 10:05:22 manager jk_chrootsh[14187]: abort, path /var/www/clients/client1/web6/./ is not owned by 5008

Checking who owns folder 'web6' I get this:

drwxr-xr-x 14 root root 4.0K Mar 17 09:43 web6



So, is there a way to jail a ssh user to the web folder?
__________________
"Common sense is not as common as commonly believed" by sjau

Auto-Install Script for ISPConfig and Horde on a Vanilla Debian Stable

Need more Repos for Ubuntu? Repository Generator
Need more Repos for Debian? Debian Repository Generator
Reply With Quote
Sponsored Links
  #2  
Old 19th March 2012, 08:19
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,393
Thanks: 833
Thanked 5,487 Times in 4,319 Posts
Default

The owner of the web6 directory depends on the security mode that you use on your server. If you set the security mode under System > Server config > web to "high", then the directory will be owned by the web6 user and not root and you can use this as home directory of the jailkit user.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 19th March 2012, 08:31
sjau sjau is offline
Local Meanie
 
Join Date: Apr 2006
Location: Switzerland
Posts: 1,146
Thanks: 4
Thanked 55 Times in 51 Posts
 
Default

I'll have a look into that. Thanks for the reply.
__________________
"Common sense is not as common as commonly believed" by sjau

Auto-Install Script for ISPConfig and Horde on a Vanilla Debian Stable

Need more Repos for Ubuntu? Repository Generator
Need more Repos for Debian? Debian Repository Generator
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Some problems and questions Typhon Installation/Configuration 22 15th January 2012 14:12
Statistic not working mzo Installation/Configuration 49 20th April 2011 12:19
Jailkit SSH user login fails outeredge General 7 21st February 2011 14:40
Vhosts...conf not synced to changes crypted General 50 24th April 2010 00:54
SSH access for site user cic Installation/Configuration 7 20th November 2007 14:21


All times are GMT +2. The time now is 18:00.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.