Dotaz: Script na Chroot

[Nes]

Prosim o pomoc - nalezl jsem jeden script na chroot jail - http://www.fuschlberger.net/programs/ssh-scp-sftp-chroot-jail/

Normal zalozim usera (nejsou predvytvorene /home/xyz) tim scriptem - http://www.pastebin.cz/show/2944 v /home se vytvoril adr chrootshell kde jsou dalsi podadresare (napr. bin a v tom jsou soubory) pak se vytvoril v /home spustitelny soubor "chrootjail"co obsahuje:

#!/bin/sh /usr/bin/sudo /usr/sbin/chroot /home/chrootshell /bin/su - $USER "$@"

winscp mi po zadani hesla pise pristup odepren, to same pokud pres konzoli dam ssh moje.ip -l chrootjail

authlog mi pise (winscp):

Jan 3 12:46:39 debianpc sshd[13028]: Failed password for invalid user chrootjail from ip.odkud.jsem.se.zkousel.logovat.pres.winscp port 1241 ssh2

authlog pri konzolovem ssh:

Jan 3 12:49:32 debianpc sshd[13182]: User chrootjail from ip.ze.ktere.se.loguji not allowed because not listed in AllowUsers Jan 3 12:49:33 debianpc sshd[13182]: Failed none for invalid user chrootjail from ip.ze.ktere.se.loguji port 59272 ssh2 Jan 3 12:49:35 debianpc sshd[13182]: (pam_unix) authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip.ze.ktere.se.loguji user=chrootjail Jan 3 12:49:37 debianpc sshd[13182]: Failed password for invalid user chrootjail from ip.ze.ktere.se.loguji port 59272 ssh2 Jan 3 12:49:41 debianpc sshd[13185]: User chrootjail from debianpc not allowed because not listed in AllowUsers Jan 3 12:49:41 debianpc sshd[13185]: Failed none for invalid user chrootjail from IP.na.kterou.se.loguji port 54960 ssh2 debianpc:/home#

v /etc/hosts.allow mam: sshd: IP.ze.ktere.se.pokousim.logovat

Vubec nevim kde muze byt problem - dekuji za pomoc.

Odpovědi

[thoger]

Co tak skusit zacat od tychto hlasok?

User chrootjail from ip.ze.ktere.se.loguji not allowed because not listed in AllowUsers
Failed none for invalid user chrootjail from ip.ze.ktere.se.loguji port ...

[Nes]

priznavam, ma chyba - do AllowUsers jsem ho ted napsal a po zadani passu se v authlog objevuje neco jineho -

Jan 3 14:25:23 debianpc sshd[22130]: Accepted password for chrootjail from ip.ze.ktere.se.loguji port 39628 ssh2 Jan 3 14:25:23 debianpc sshd[22132]: (pam_unix) session opened for user chrootjail by (uid=0) Jan 3 14:25:23 debianpc sudo: chrootjail : TTY=pts/14 ; PWD=/home/chrootshell/home/chrootjail ; USER=root ; COMMAND=/usr/sbin/chroot /home/chrootshell /bin/su - chrootjail Jan 3 14:25:23 debianpc sshd[22132]: (pam_unix) session closed for user chrootjail