[scponly] ssh/scp logins to chrooted sftp-only-server

Thomas Witt mail at thomas-witt.com
Sat Jan 21 14:24:44 EST 2006


Hi,

I've got the following problem: I've set up scponly as chrooted.
I am running Linux using SuSE 9.2.

Everything works fine, but when I try to ssh or scp (which SHOULD
be denied), I'm getting the following output from ssh:

debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Entering interactive session.
debug1: Sending command: scp -v -t .

and the ssh-client hangs.

But this produces the following tasks on my machine:

scptest 28849  0.0  0.2  7800 1512 ?        S    20:20   0:00 sshd:  
scptest at notty
scptest 28850  0.0  0.0     0    0 ?        Zs   20:20   0:00  
[scponlyc] <defunct>

... which is obviously bad. How can I configure scponly to just
exit and throw the visitor out without producing defunct-Tasks?

... Thomas

P.S:: The debug output from sshd is as follows:

Jan 21 20:20:47 mail sshd[28868]: debug1: Entering interactive  
session for SSH2.
Jan 21 20:20:47 mail sshd[28868]: debug2: fd 5 setting O_NONBLOCK
Jan 21 20:20:47 mail sshd[28868]: debug2: fd 6 setting O_NONBLOCK
Jan 21 20:20:47 mail sshd[28868]: debug1: server_init_dispatch_20
Jan 21 20:20:47 mail sshd[28868]: debug1: server_input_channel_open:  
ctype session rchan 0 win 131072 max 32768
Jan 21 20:20:47 mail sshd[28868]: debug1: input_session_request
Jan 21 20:20:47 mail sshd[28868]: debug1: channel 0: new [server- 
session]
Jan 21 20:20:47 mail sshd[28868]: debug1: session_new: init
Jan 21 20:20:47 mail sshd[28868]: debug1: session_new: session 0
Jan 21 20:20:47 mail sshd[28868]: debug1: session_open: channel 0
Jan 21 20:20:47 mail sshd[28868]: debug1: session_open: session 0:  
link with channel 0
Jan 21 20:20:47 mail sshd[28868]: debug1: server_input_channel_open:  
confirm session
Jan 21 20:20:47 mail sshd[28868]: debug1: server_input_channel_req:  
channel 0 request exec reply 0
Jan 21 20:20:47 mail sshd[28868]: debug1: session_by_channel: session  
0 channel 0
Jan 21 20:20:47 mail sshd[28868]: debug1: session_input_channel_req:  
session 0 req exec
Jan 21 20:20:47 mail sshd[28869]: debug3: channel 0: close_fds r -1 w  
-1 e -1 c -1





More information about the scponly mailing list