Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 11th January 2011, 20:38
spazio spazio is offline
Member
 
Join Date: Apr 2007
Posts: 37
Thanks: 1
Thanked 2 Times in 2 Posts
Default ( SOLVED ) jailkit ispconfig 3

After some test here is what worked for me.

I deleted the website and recreted it but with a twist.

In the client limit " Max. number of Shell users " needs to be more than 0 prior to creating the website. In my case if the number is 0 when the website is created, the jailkit doesn't work! After putting it a 1 everything works great.

Hope it helps somebody.
Reply With Quote
The Following User Says Thank You to spazio For This Useful Post:
falko (12th January 2011)
Sponsored Links
  #12  
Old 15th January 2011, 19:52
pavljiks pavljiks is offline
Junior Member
 
Join Date: Dec 2010
Posts: 17
Thanks: 2
Thanked 0 Times in 0 Posts
 
Default

Quote:
Originally Posted by pavljiks View Post
Installed and tested two times.
Same setup: ISPConfig 3.0.3.1. Ubuntu 10.10 and Jailkit 2.12-1 (installed before ISPConfig).

When i create a shell user with chroot - Jailkit
i have:

/etc/passwd
Code:
heino1:x:5004:5005::/var/www/clients/client1/web1/./home/heino1:/bin/false
i try to connect using ssh and in /var/log/auth.log i see:
Code:
Dec 28 17:56:00 server1 sshd[31363]: Accepted password for heino1 from 87.110.9.38 port 9435 ssh2
Dec 28 17:56:00 server1 sshd[31363]: pam_unix(sshd:session): session opened for user heino1 by (uid=0)
Dec 28 17:56:00 server1 sshd[31363]: pam_unix(sshd:session): session closed for user heino1
I change shell manually:
Code:
usermod -s /usr/sbin/jk_chrootsh heino1

Dec 28 17:57:34 server1 usermod[31398]: change user 'heino1' shell from '/bin/false' to '/usr/sbin/jk_chrootsh'
in final i have this in auth.log
Code:
Dec 28 17:58:33 server1 sshd[31414]: pam_unix(sshd:session): session opened for user heino1 by (uid=0)
Dec 28 17:58:33 server1 jk_chrootsh[31430]: now entering jail /var/www/clients/client1/web1 for user heino1 (5004)
Dec 28 17:58:33 server1 jk_chrootsh[31430]: ERROR: failed to execute shell /bin/bash for user heino1 (5004), check the permissions and libraries of /var/www/clients/client1/web1//bin/bash
Dec 28 17:58:33 server1 sshd[31414]: pam_unix(sshd:session): session closed for user heino1
As in the begining said. Installed and tested two times. In correct order (as manual instructs).

PS. without jailkit everything works fine. But not so secure as i want.
Just installed fresh 3.0.3.2 ISPconfig and last Jailkit 2.13.
After ISPconfigu update all finally working
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix problems with smtp linkdeb Server Operation 13 15th March 2014 17:58
setting up chrooted ssh user, jailkit installed after ispconfig bn61 Installation/Configuration 7 5th May 2011 16:02
Email problem 'Cannot set my user or group id.' (using ISPConfig 3 + OpenSuSE 11.2) urosm Installation/Configuration 5 19th June 2010 22:41
ssh security problem... Jonathan Installation/Configuration 1 26th May 2006 01:59
problem with ssh security Jonathan Installation/Configuration 1 26th May 2006 01:52


All times are GMT +2. The time now is 01:50.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.