chrooted SSH + Debian Etch

[LeoLinux]

I don't want to push you Falko ;-) but when do you guess you're able to publish a howto? I'm kind of lost without that ;-/

Thank you very much


Leander

[lauer]

Hello
I have just followed the guide on a Debian Etch AMD64, and the only problem I had, was that an error about /bin/bash not could be found.
A quick search on google gave me the result, that a lib-file was missing.
`ldd /bin/bash`
shows whats files the program need. And the guide didn't say anything about
/lib64/ld-linux-x86-64.so.2
After adding this to the chroot, Its work without problems.

[LeoLinux]

Hi,

Thanks for your response. Can you tell me where you found this tutorial, or do you have a link?


Leander

[lauer]

I use the same tutorial as you.

I only have som problems with sftp, where the connection are closed after password supplied. But ssh til the chroot works fine.

[LeoLinux]

Hi again ...

ok ... , I did it .. and it seems to work ... the users are jailed ... BUT .. if I type as root

ssh -l user 10.1.10.1

the following error appears:

/etc/ssh/ssh_config line 45: Unsupported option "GSSAPIAuthentication"
/etc/ssh/ssh_config line 46: Unsupported option "GSSAPIDelegateCredentials"

but the connection goes on ... it seems as I could ignore it ... but why shows that up?? should I hav compiled those options with the ssh chroot patch before?? Or should I easily just comment those Lines out ;-) ?


Leander

[8c2gon]

Thanks for all of the tips on this folks - I have also just managed to get to the stage that LeoLinux is at.

I can't figure out how to get sFTP working tho - know it's not a "real" protocol, I have tried copying over a few things but an getting the message..

sftp testuser@127.0.0.1
Request for subsystem 'sftp' failed on channel 0
Couldn't read packet: Connection reset by peer.

Can anyone tell me what I need to do?

Thanks in advance..

[falko]

Originally Posted by 8c2gon

Thanks for all of the tips on this folks - I have also just managed to get to the stage that LeoLinux is at.

I can't figure out how to get sFTP working tho - know it's not a "real" protocol, I have tried copying over a few things but an getting the message..

sftp testuser@127.0.0.1
Request for subsystem 'sftp' failed on channel 0
Couldn't read packet: Connection reset by peer.

Can anyone tell me what I need to do?

Thanks in advance..

Any errors in your logs?

[8c2gon]

Thanks for reply Falko,

I don't seem to have a log file for SSH - I don't have a file \var\log\secure - should this have been setup automatically or is it something that I should have done? I'm a noob at this stuff, please excuse my ignorance.

I can log in fine with a user that is not jailed, so at a guess I need to add somehting else to the chroot environment, just not too sure.

[falko]

Take a look at /var/log/auth.log.

[8c2gon]

Thanks Falko again for the response. The auth log wasn't showing me anything, it was showing all the authentications as accepted. I actually managed to find this out today, If anyone is interested this is what I had to do.

Replace this line in the sshd_config file:

Subsystem sftp /usr/lib/openssh/sftp-server

With this line:

Subsystem sftp /usr/lib/sftp-server

that got rid of the subsystem error. And I got connected okay.

Thanks to one and all!

8c2