[BlueOnyx:24572] Issues with jailed sftp on 5210R

Dirk Estenfeld dirk.estenfeld at blackpoint.de
Wed Dec 9 04:10:11 -05 2020


Hello,



since the last CentOS8 release update I have a problem with jailed SFTP connections "Chrooted SFTP, SCP and RSYNC" on a server with CentOS8/BO 5210R.

No connection is established. The SFTP client asks if there is a SFTP server on the other side.

SFTP connections of users with unlimited shell access are no problem.



Yes, the server was restarted. Yes, the jailkit.service is running.



Here is an excerpt from the connection log:

Dec  9 10:06:14 orbital7 systemd-logind[1654]: New session 130 of user detest.

Dec  9 10:06:14 orbital7 systemd[1]: Started Session 130 of user detest.

Dec  9 10:06:17 orbital7 jk_chrootsh[25727]: path /home/.sites/site6/home/./users/detest is setgid

Dec  9 10:06:17 orbital7 jk_chrootsh[25727]: path /home/.sites/site6/home/./users/detest is group writable

Dec  9 10:06:17 orbital7 jk_chrootsh[25727]: now entering jail /home/.sites/site6/home for user detest (1156) with arguments -c /usr/libexec/openssh/sftp-server

Dec  9 10:06:17 orbital7 jk_lsh[25727]: jk_lsh version 2.20, started

Dec  9 10:06:17 orbital7 jk_lsh[25727]: executing command '/usr/libexec/openssh/sftp-server' for user detest (1156)

Dec  9 10:06:18 orbital7 systemd-logind[1654]: Session 130 logged out. Waiting for processes to exit.

Dec  9 10:06:18 orbital7 systemd[1]: session-130.scope: Succeeded.

Dec  9 10:06:18 orbital7 systemd-logind[1654]: Removed session 130.





This does not necessarily look like an error message to me.

I have not found any other logs or error messages.

As written, I set the user to "unlimited shell access", then it works.

But the "Chrooted SFTP, SCP and RSYNC" does not work.



Can anyone understand this? Are there any ideas? Is there a fix for it?



Best regards,

Dirk


blackpoint GmbH - Friedberger Straße 106b - 61118 Bad Vilbel





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20201209/987896d8/attachment.html>


More information about the Blueonyx mailing list