[scponly] Permission denied

[Chris de Vidal]

Update: if I change the shell to /usr/bin/scponly, that works.  Didn't
have to recompile.  Something is weird about the scponlyc binary.

Ideas?

CD


Chris de Vidal said this while chewing gum:
> scponly version 4.0
> Debian 3.0 (Woody)
>
>
> Great program!!!  Unfortunately I can't get it to work.  I'm getting
> "permission denied" in /var/log/auth.log.
>
>
>
> I compiled my copy of the software like this:
> ./configure --disable-scp-compat --disable-gftp-compat
> --enable-chrooted-binary --prefix=/usr
>
> (By the way, --disable-winscp-compat fails during compile.  Dunno why.)
>
> make
> make install
>
> Added these lines to /etc/shells:
> /usr/bin/scponly
> /usr/sbin/scponlyc
>
> I then ran "make jail" and gave it the scponly username and set his home
> directory to /portal (where I want all my users to be chrooted).
>
>
> When I log in via SFTP I get these messages in /var/log/auth.log:
> Mar 31 16:57:04 dl2 sshd[15205]: Accepted password for scponly from
> 172.19.6.89 port 2279 ssh2
> Mar 31 16:57:04 dl2 sshd[15207]: subsystem request for sftp
> Mar 31 16:57:04 dl2 PAM_unix[15207]: (ssh) session opened for user scponly
> by (uid=1005)
> Mar 31 21:57:04 dl2 [15208]: running: /usr/lib/sftp-server (username:
> scponly(1005), IP/port: 172.19.6.89 2279 602)
> Mar 31 21:57:04 dl2 [15208]: failed: /usr/lib/sftp-server with error
> Permission denied(13) (username: scponly(1005), IP/port: 172.19.6.89 2279
> 602)
>
> When I changed the shell to /bin/bash the scponly user could then log in.
>
> Permissions of /portal are 2775.
>
> Ideas?
>
> CD
>
> _______________________________________________
> scponly mailing list
> scponly at lists.ccs.neu.edu
> https://lists.ccs.neu.edu/bin/listinfo/scponly
>