Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Developers' Forum

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 4th May 2012, 19:39
halsafar halsafar is offline
Junior Member
 
Join Date: May 2012
Posts: 6
Thanks: 0
Thanked 1 Time in 1 Post
Default Jailkit Problems

*Please move to appropriate category*

Followed perfect server configuration on Ubuntu 12.04 every step of the way in the exact order. Everything was fine up until attempting to setup shell users in ISPConfig that are jailed.

Making a post with some solutions as Google lacks good help in this area.

Problem: namespace resolution and cannot scp/sftp
- Jailed users could not perform name resolution (errors with wget for example)
- Jailed users could not use scp (unknown user $uid)
Solution to both (replace # with your client and site numbers):
Code:
cp /lib/x86_64-linux-gnu/libnss_* /var/www/clients/client#/web#/lib/x86_64-linux-gnu/
Permanent solution likely involves a fix in /etc/jailkit/jk_init.ini. The paths it contains are wrong for some of the libs and it does not list all the necessary libs.
Problem: nano, pico "Error opening terminal: xterm"
- likely caused because xterm libraries are missing
- you maybe don't want xterm as your choice
Solution:
Still trying to fix this one
Reply With Quote
The Following User Says Thank You to halsafar For This Useful Post:
falko (5th May 2012)
Sponsored Links
  #2  
Old 29th June 2012, 21:30
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
Default

I'm wondering if I'm having the same problem. While jailkit ssh sessions work find on the command line, using any type of highlevel client simply doesn't work (MacFusion, Coda, Cyberduck, Dreamweaver, etc.).

I suspect it is because scp is broken and this solution requires a manual for every client that gets created? Trying to find a fix...
Reply With Quote
  #3  
Old 30th June 2012, 09:41
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
Default

Jailkit appears to be half baked. Core libraries are missing since Ubuntu now implements the /lib/x86_64-linux-gnu subfolder. I was able to resolve this by creating aliases for select components to the sub folder. I did this prior to installing ISPConfig and it appears to have resolved my issues of scp/sftp (allowing Dreamweaver, Coda, Macfusion, clients to connect with jailkit, etc.). I'm not sure if this is the appropriate way to do this, but here is how:

cp -s /lib/x86-linux-gnu/libnss_* /lib/
Reply With Quote
  #4  
Old 2nd July 2012, 10:04
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,065
Thanks: 826
Thanked 5,395 Times in 4,239 Posts
Default

Quote:
Jailkit appears to be half baked.
Not at all. The jailis fully configurable. You can configure it in jailkit if you need additional software or if you want to copy additional directores when the jail is created. Please take a look at the jailkit documnetation, the available config files and options are explained there.

http://olivier.sessink.nl/jailkit/
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 2nd July 2012, 10:17
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
Default

Sorry. I should clarify; Jailkit does not work by default like it did on Ubuntu 10.04 LTS because Ubuntu's introduction of the subfolder in 12.04 LTS. While you can ssh and do something as trivial as ls, you cannot use it for SFTP, you cannot use it for commands such as scp, nor can you use it for commands like wget. No IDEs or transport programs will work with it 'out of the box'. No Netbeans, no eclipse, no Dreamweaver, Coda, PHPEd, no Cyberduck, no Macfusion, ...

However, you can fix this by using the command above to restore symbolic links to the needed libraries to use Jailkit in the most common manner for web purposes: data i/o.
Reply With Quote
  #6  
Old 2nd July 2012, 10:36
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,065
Thanks: 826
Thanked 5,395 Times in 4,239 Posts
Default

What you did with the command above con be configured in the jailkit config files. Why do you run this command manually if you can just configure it in the jailkit config files?

Quote:
No IDEs or transport programs will work with it 'out of the box'. No Netbeans, no eclipse, no Dreamweaver, Coda, PHPEd, no Cyberduck, no Macfusion, ...
Most users use ftps with these apps (not scp or sftp), so no ssh user is required then.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
Steveorevo (2nd July 2012)
  #7  
Old 2nd July 2012, 10:48
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
Talking

Hi Til,
Thank you for responding.

Quote:
Why do you run this command manually
I did this for the same reason that myself, halsafar, globiws, and several others have stated in their post titles: "namespace resolution and cannot scp/sftp", and "Ubuntu Jailkit multiple problems".

Quote:
What you did with the command above con be configured in the jailkit config files
I believe we're not familiar with Jailkit like you are. :-) Had we known that, we wouldn't be asking these questions or creating those post titles. You see, Falko (and yourself) often provides great insight and quality posts that work really well! So I had to improvise and provide a solution for others that just works in your absence.

Quote:
you can just configure it in the jailkit config files...
As I stated in my post, "I'm not sure if this is the appropriate way to do this, but here is how...". Now I know, thanks to your response and keen knowledge.

Thank you very much!
Reply With Quote
  #8  
Old 2nd July 2012, 11:05
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
Default

Quote:
Most users use ftps with these apps (not scp or sftp), so no ssh user is required then.
Thats because most users are stuck with cPanel or simply don't have access to something as simply and cool as ISPConfig!

I prefer SFTP because it has several pros like one connection (no need for DATA ports), native support for keys, its directory listing is uniform, standard and consistent mechanism for file and directory attributes, includes operations for permissions and file locking and more functionality (used in some IDEs GUIs, etc.).
Reply With Quote
The Following User Says Thank You to Steveorevo For This Useful Post:
hrvbid (15th August 2013)
  #9  
Old 7th August 2012, 08:31
bormoglot bormoglot is offline
Junior Member
 
Join Date: Aug 2012
Posts: 3
Thanks: 0
Thanked 6 Times in 1 Post
Default the same trouble, solutions do not work

I have Ubuntu 12.04 LTS (GNU/Linux 3.2.0-27-generic x86_64) with ispconfig 3.0.4.5. Symptoms are exactly as described (ssh logins fine but no more: jailed session give no name resolution, no scp, no nothing).

I have updated jk_init.ini with widest references
===================================
[uidbasics]
libraries = /lib/*, /lib64/*, /usr/lib/*, /lib/x86_64-linux-gnu/*

and

[netbasics]
libraries = /lib/*, /lib64/*, /usr/lib/*, /lib/x86_64-linux-gnu/*
===================================

But it does not help. Where to look at further?
Reply With Quote
  #10  
Old 7th August 2012, 08:34
Steveorevo Steveorevo is offline
Member
 
Join Date: Feb 2010
Posts: 33
Thanks: 6
Thanked 6 Times in 5 Posts
 
Default

see above?
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
creating a jailkit user fails Justin Albstmeijer General 5 30th August 2011 17:02
Problems installing LAMP - MySQL and PHP5 JosBR Server Operation 5 19th December 2009 21:00
E: Sub-process /usr/bin/dpkg returned an error code (1) ergti Installation/Configuration 1 16th August 2009 12:36
Management/system config/settings & /server/settings not working!! dactor Installation/Configuration 9 6th February 2008 09:11
Empty Recycle Bin jon335 General 40 6th May 2006 11:56


All times are GMT +2. The time now is 18:48.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.