Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
chroot ssh
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
amigafan
Tux's lil' helper
Tux's lil' helper


Joined: 10 Jul 2003
Posts: 134
Location: Ahrensburg, Germany

PostPosted: Wed Nov 14, 2007 2:28 pm    Post subject: chroot ssh Reply with quote

We've used a chroot environment for some ssh users. We followed this guide: http://gentoo.linuxhowtos.org/openssh/chrootedssh.htm

After one of the last updates this doesn't work anymore. Our clients get a "connection closed" instantly after typing in the password. We rebuild the chroot dir with all binaries but this doesn't work. Can anyone confirm this? I don't know which package is responsible for this - maybe the pam update?

thanks,
Back to top
View user's profile Send private message
Dammital
Apprentice
Apprentice


Joined: 05 Nov 2004
Posts: 189

PostPosted: Wed Nov 14, 2007 9:35 pm    Post subject: Reply with quote

Just a shot in the dark, but per the Linux-PAM 0.99 upgrade guide did you restart sshd?
Back to top
View user's profile Send private message
amigafan
Tux's lil' helper
Tux's lil' helper


Joined: 10 Jul 2003
Posts: 134
Location: Ahrensburg, Germany

PostPosted: Fri Nov 16, 2007 9:40 am    Post subject: Reply with quote

Yes, of course ;) Its related with the new way pam handles chroot logins. pam_chroot is now needed and it needs to be configured.[/quote]
Back to top
View user's profile Send private message
Nobbs
n00b
n00b


Joined: 16 Nov 2007
Posts: 1

PostPosted: Fri Nov 16, 2007 12:52 pm    Post subject: Reply with quote

in /etc/pam.d/sshd
add the line
Code:
 session required pam_chroot.so debug
(the debug is optional)

in /etc/security/chroot.conf set up th chrooted homes of your users
Code:
 foo           /home/foo
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum