[scponly] scponly on redhat 8 with jail

[Mike Cronnelly]

Hi Moti,

Move all the files from <chroot_base>/usr/kerberos/lib
to <chroot_base>/lib

That should (hopefully) do the trick! (It worked for me, anyway!)

Regards,
Mike

Moti Levy wrote:

>Hi ,
>I'm trying to setup scponly with a jail on RH8 ,for some reason it will not
>work .
>configure command:./configure --enable-chrooted-binary
>
>this what iget in the logs :
>[13579]: chrooted binary in place, will chroot()
>[13579]: 3 arguments in total.
>[13579]:        arg 0 is scponlyc
>[13579]:        arg 1 is -c
>[13579]:        arg 2 is scp -t /
>[13579]: opened log at LOG_AUTHPRIV, opts 0x00000029
>[13579]: retrieved home directory of "/home/scponly" for user "scponly"
>[13579]: chrooting to dir: "/home/scponly"
>[13579]: setting uid to 502
>[13579]: processing request: "scp -t /"
>[13579]: running: /usr/bin/scp -t / (username: scponly(502), IP/port:
>12.27.148.74 1366 22)
>/usr/bin/scp: error while loading shared libraries: libkrb5.so.3: cannot
>open shared object file: No such file or directory
>lost connection
>
>ldd usr/bin/scp
>        libresolv.so.2 => /lib/libresolv.so.2 (0x40013000)
>        libutil.so.1 => /lib/libutil.so.1 (0x40026000)
>        libz.so.1 => /usr/lib/libz.so.1 (0x40029000)
>        libnsl.so.1 => /lib/libnsl.so.1 (0x40037000)
>        libcrypto.so.2 => /lib/libcrypto.so.2 (0x4004c000)
>        libkrb5.so.3 => /usr/kerberos/lib/libkrb5.so.3 (0x40127000)
>        libk5crypto.so.3 => /usr/kerberos/lib/libk5crypto.so.3 (0x40184000)
>        libcom_err.so.3 => /usr/kerberos/lib/libcom_err.so.3 (0x40195000)
>        libc.so.6 => /lib/i686/libc.so.6 (0x42000000)
>        libdl.so.2 => /lib/libdl.so.2 (0x40197000)
>        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
>
>#ls /home/scponly/usr/kerberos/lib
>      total 544
>drwxr-xr-x    2 root     root         4096 May 15 09:22 .
>drwxr-xr-x    3 root     root         4096 May 15 09:21 ..
>-rwxr-xr-x    1 root     root         9014 May 15 09:22 libcom_err.so.3
>-rwxr-xr-x    1 root     root        78240 May 15 09:22 libk5crypto.so.3
>-rwxr-xr-x    1 root     root       444807 May 15 09:22 libkrb5.so.3
>
>#finger scponly
>Login: scponly                          Name: (null)
>Directory: /home/scponly                Shell: /usr/local/sbin/scponlyc
>Never logged in.
>No mail.
>No Plan.
>
>
>any idea's ?
>thanks
>Moti
>
>_______________________________________________
>scponly mailing list
>scponly at lists.ccs.neu.edu
>https://lists.ccs.neu.edu/bin/listinfo/scponly
>  
>