Yet another jailkit thread

Discussion in 'Installation/Configuration' started by simpim, Feb 16, 2011.

  1. simpim

    simpim New Member

    Hello all, I am having problems with jailkit when i use sftp. It doesnt seem to be working at all.

    My setup;
    linode server, ubunto 10.04 LTS
    i installed jailkit before i installed ISPconfig.

    jailkit version 2-.13
    ISPConfig version 3.0.3.2

    Everything seems fine so far, when i go to ISPconfig i add a client, then i add a website, i log out and login as teh client and create a SSH account. I can login using filezilla of putty using the new user but i can brows everywhere.

    I did the following;
    Code:
    tail -f /var/log/auth.log
    and the result was
    Code:
    Feb 16 15:32:45 li244-246 sshd[22340]: Accepted password for joesss from x.x.x.x port 52274 ssh2
    Feb 16 15:32:45 li244-246 sshd[22340]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
    Feb 16 15:32:45 li244-246 sshd[22340]: pam_unix(sshd:session): session opened for user joesss by (uid=0)
    Feb 16 15:32:45 li244-246 sshd[22358]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
    Feb 16 15:32:45 li244-246 jk_chrootsh[22360]: now entering jail /var/www/clients/client1/web1 for user joesss (5004)
    
    I changed the IP to x's
    Let me know if i posted the correct information.
     
    Last edited: Feb 16, 2011
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    As far as I know, you cant use sftp then. Please use ftps instead, which is the secure version of FTP and supported by all major ftp clients as well.
     
  3. simpim

    simpim New Member

    Thanks for te quick reply till.

    Im not sure i follow what you mean. why cant I use sftp? It does work fine, I can login but its not limiting the browsing to their specific directory.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    With sftp or with a normal ssh putty session?
     
  5. simpim

    simpim New Member

    Both work. I can login using putty and i can use filezilla on sftp. I just noticed that even though i can browse the entire file system, its doesnt show all the directorys that root sees, maybe 80%
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    OK, so the jail works fine. A jail always contains copys of system directories that are needed by the programs that are installed inside the jail to work properly.
     
  7. simpim

    simpim New Member

    I had no idea of this info. Thank you very much for the help till!
     
  8. simpim

    simpim New Member

    Is there a way a user can do any damage by removing some of the files or directories in his SSH account? or is the damage limited to his account only?
     
  9. till

    till Super Moderator Staff Member ISPConfig Developer

    The user is limited to his account in the jail, so he can only mess up its own account.
     

Share This Page