[scponly] Permission denied

[Chris de Vidal]

scponly version 4.0
Debian 3.0 (Woody)


Great program!!!  Unfortunately I can't get it to work.  I'm getting
"permission denied" in /var/log/auth.log.



I compiled my copy of the software like this:
./configure --disable-scp-compat --disable-gftp-compat
--enable-chrooted-binary --prefix=/usr

(By the way, --disable-winscp-compat fails during compile.  Dunno why.)

make
make install

Added these lines to /etc/shells:
/usr/bin/scponly
/usr/sbin/scponlyc

I then ran "make jail" and gave it the scponly username and set his home
directory to /portal (where I want all my users to be chrooted).


When I log in via SFTP I get these messages in /var/log/auth.log:
Mar 31 16:57:04 dl2 sshd[15205]: Accepted password for scponly from
172.19.6.89 port 2279 ssh2
Mar 31 16:57:04 dl2 sshd[15207]: subsystem request for sftp
Mar 31 16:57:04 dl2 PAM_unix[15207]: (ssh) session opened for user scponly
by (uid=1005)
Mar 31 21:57:04 dl2 [15208]: running: /usr/lib/sftp-server (username:
scponly(1005), IP/port: 172.19.6.89 2279 602)
Mar 31 21:57:04 dl2 [15208]: failed: /usr/lib/sftp-server with error
Permission denied(13) (username: scponly(1005), IP/port: 172.19.6.89 2279
602)

When I changed the shell to /bin/bash the scponly user could then log in.

Permissions of /portal are 2775.

Ideas?

CD