[scponly] unable to rsync with rsync-enabled scponlyc - even
without -e ssh
Paul Hyder
Paul.Hyder at noaa.gov
Thu Oct 27 18:15:56 EDT 2005
user wrote:
> Hello,
>
> On Thu, 27 Oct 2005, Paul Hyder wrote:
>
>
>>>So, I am back to square one ... basically, I can't rsync to a scponlyc
>>>shell user.
>>>
>>>Thanks for any comments or help.
>>
>>Have you tried turning on the debug syslog output to get more detail of
>>what scponly is doing? (Changing the value in the debuglevel file to 1,
>>it's usually in /usr/local/etc/scponly unless your install is relocated.)
>
>
>
> Here is what I have - on the client side:
>
> #rsync -av ./ssher good at ufs2:/good
> Password:
> rsync: connection unexpectedly closed (0 bytes received so far) [sender]
> rsync error: error in rsync protocol data stream (code 12) at io.c(365)
>
> and on the server side:
>
> # cat /var/log/debug.log
> Oct 27 15:43:07 ufs2 [10155]: 3 arguments in total.
> Oct 27 15:43:07 ufs2 [10155]: arg 0 is scponlyc
> Oct 27 15:43:07 ufs2 [10155]: arg 1 is -c
> Oct 27 15:43:07 ufs2 [10155]: arg 2 is rsync --server -vlogDtpr . /good
> Oct 27 15:43:07 ufs2 [10155]: opened log at LOG_AUTHPRIV, opts 0x00000009
> Oct 27 15:43:07 ufs2 [10155]: retrieved home directory of "/home" for user
> "good"
> Oct 27 15:43:07 ufs2 [10155]: chrooting to dir: "/home"
> Oct 27 15:43:07 ufs2 [10155]: setting uid to 1002
> Oct 27 15:43:07 ufs2 [10155]: processing request: "rsync --server
> -vlogDtpr . /good"
>
>
> and that's it. The debug does not seem to indicate any problems. Also,
> to rule out permission problems, I chmodded /home/good to 0777 prior to
> this test.
>
> So it chroots to /home, and tries to put the file in /good - which is all
> correct ... it just bombs out. Both systems (client and server) are
> identical installs of FreeBSD, with identical rsync installs.
>
> Also, as you know from previous emails, scp works fine:
>
> On the client side:
>
> #scp ./zero good at ufs2:/good
>
> And on the server:
>
> Oct 27 15:49:44 ufs2 [10183]: 3 arguments in total.
> Oct 27 15:49:44 ufs2 [10183]: arg 0 is scponlyc
> Oct 27 15:49:44 ufs2 [10183]: arg 1 is -c
> Oct 27 15:49:44 ufs2 [10183]: arg 2 is scp -t /good
> Oct 27 15:49:44 ufs2 [10183]: opened log at LOG_AUTHPRIV, opts 0x00000009
> Oct 27 15:49:44 ufs2 [10183]: retrieved home directory of "/home" for user
> "good"
> Oct 27 15:49:44 ufs2 [10183]: chrooting to dir: "/home"
> Oct 27 15:49:44 ufs2 [10183]: setting uid to 1002
> Oct 27 15:49:44 ufs2 [10183]: processing request: "scp -t /good"
>
>
> Thanks.
>
Couple of things to check, there should have been a "running" message
but it is a LOG_INFO in syslog and would be there even without the
debuglevel set. Do you see that? There might also be a LOG_ERR
failed message that could also have gone to another file. You should
at least have the "running" message.
Paul Hyder
FYI: This is starting to sound like a jail that is very close but
missing something.
More information about the scponly
mailing list