#1  
Old 16th February 2011, 18:05
simpim simpim is offline
Junior Member
 
Join Date: Feb 2011
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default Yet another jailkit thread

Hello all, I am having problems with jailkit when i use sftp. It doesnt seem to be working at all.

My setup;
linode server, ubunto 10.04 LTS
i installed jailkit before i installed ISPconfig.

jailkit version 2-.13
ISPConfig version 3.0.3.2

Everything seems fine so far, when i go to ISPconfig i add a client, then i add a website, i log out and login as teh client and create a SSH account. I can login using filezilla of putty using the new user but i can brows everywhere.

I did the following;
Code:
tail -f /var/log/auth.log
and the result was
Code:
Feb 16 15:32:45 li244-246 sshd[22340]: Accepted password for joesss from x.x.x.x port 52274 ssh2
Feb 16 15:32:45 li244-246 sshd[22340]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 16 15:32:45 li244-246 sshd[22340]: pam_unix(sshd:session): session opened for user joesss by (uid=0)
Feb 16 15:32:45 li244-246 sshd[22358]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 16 15:32:45 li244-246 jk_chrootsh[22360]: now entering jail /var/www/clients/client1/web1 for user joesss (5004)
I changed the IP to x's
Let me know if i posted the correct information.

Last edited by simpim; 16th February 2011 at 18:09.
Reply With Quote
Sponsored Links
  #2  
Old 16th February 2011, 18:12
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,736
Thanks: 840
Thanked 5,597 Times in 4,408 Posts
Default

As far as I know, you cant use sftp then. Please use ftps instead, which is the secure version of FTP and supported by all major ftp clients as well.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 16th February 2011, 18:15
simpim simpim is offline
Junior Member
 
Join Date: Feb 2011
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by till View Post
As far as I know, you cant use sftp then. Please use ftps instead, which is the secure version of FTP and supported by all major ftp clients as well.
Thanks for te quick reply till.

Im not sure i follow what you mean. why cant I use sftp? It does work fine, I can login but its not limiting the browsing to their specific directory.
Reply With Quote
  #4  
Old 16th February 2011, 18:18
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,736
Thanks: 840
Thanked 5,597 Times in 4,408 Posts
Default

With sftp or with a normal ssh putty session?
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 16th February 2011, 18:22
simpim simpim is offline
Junior Member
 
Join Date: Feb 2011
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by till View Post
With sftp or with a normal ssh putty session?
Both work. I can login using putty and i can use filezilla on sftp. I just noticed that even though i can browse the entire file system, its doesnt show all the directorys that root sees, maybe 80%
Reply With Quote
  #6  
Old 16th February 2011, 18:23
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,736
Thanks: 840
Thanked 5,597 Times in 4,408 Posts
Default

OK, so the jail works fine. A jail always contains copys of system directories that are needed by the programs that are installed inside the jail to work properly.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
simpim (16th February 2011)
  #7  
Old 16th February 2011, 18:41
simpim simpim is offline
Junior Member
 
Join Date: Feb 2011
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by till View Post
OK, so the jail works fine. A jail always contains copys of system directories that are needed by the programs that are installed inside the jail to work properly.
I had no idea of this info. Thank you very much for the help till!
Reply With Quote
  #8  
Old 16th February 2011, 19:39
simpim simpim is offline
Junior Member
 
Join Date: Feb 2011
Posts: 8
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Is there a way a user can do any damage by removing some of the files or directories in his SSH account? or is the damage limited to his account only?
Reply With Quote
  #9  
Old 17th February 2011, 00:59
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 36,736
Thanks: 840
Thanked 5,597 Times in 4,408 Posts
 
Default

The user is limited to his account in the jail, so he can only mess up its own account.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Jailkit not working ISPConfig denmaddog Installation/Configuration 18 15th May 2011 00:13
Safe to upgrade Jailkit to latest version? Hans Installation/Configuration 1 29th April 2010 00:09
Bug? Jailkit / chroot crashed server grigra General 19 15th October 2009 10:48
Moving ISPConfig - New thread Numerizen Tips/Tricks/Mods 3 2nd April 2009 11:01
Moving ISPConfig - New thread Numerizen General 1 26th March 2009 18:55


All times are GMT +2. The time now is 03:42.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.