sftp chroot not working

Damien Miller djm at mindrot.org
Tue May 15 08:13:52 EST 2007


There is no chroot patch that is supported by the OpenSSH developers -
you should seek assistance from the author of whichever chroot patch
you are using.

-d

On Mon, 14 May 2007, Claudia Vaccaro wrote:

> Hi,
> 
> I have configured and installed openssh-4.5p1-chroot on my aix server 
> 5.3-05.
> 
> I am able to chroot during ssh connections but when trying to chroot an 
> sftp connection I am getting the error below:
> 
> Any ideas?, I have modified the session.c file, reconfigure and 
> re-install without any luck. (regular sftp users are not being affected)
> 
> 
> sftp -1Cv chr at puff
> Connecting to puffin...
> OpenSSH_4.5p1, OpenSSL 0.9.7g 11 Apr 2005
> debug1: Reading configuration data /opt/etc/ssh_config
> debug1: Connecting to puff [120.64.7.52] port 22.
> debug1: Connection established.
> debug1: identity file /home/chr/.ssh/identity type -1
> debug1: Remote protocol version 1.99, remote software version OpenSSH_4.5
> debug1: match: OpenSSH_4.5 pat OpenSSH*
> debug1: Local version string SSH-1.5-OpenSSH_4.5
> debug1: Waiting for server public key.
> debug1: Received server public key (768 bits) and host key (2048 bits).
> The authenticity of host 'puff (120.64.7.52)' can't be established.
> RSA1 key fingerprint is f4:dd:48:cf:6d:1d:bf:4c:2f:ac:dc:95:fc:5d:ac:fa.
> Are you sure you want to continue connecting (yes/no)? yes
> Warning: Permanently added 'puff,120.64.7.52' (RSA1) to the list of 
> known hosts.
> debug1: Encryption type: 3des
> debug1: Sent encrypted session key.
> debug1: Installing crc compensation attack detector.
> debug1: Received encrypted confirmation.
> debug1: Doing challenge response authentication.
> debug1: No challenge.
> debug1: Doing password authentication.
> chr at puff's password:
> debug1: Requesting compression at level 6.
> debug1: Enabling compression at level 6.
> debug1: Sending command: /opt/libexec/sftp-server
> debug1: Entering interactive session.
> debug1: fd 0 clearing O_NONBLOCK
> debug1: Transferred: stdin 9, stdout 0, stderr 0 bytes in 0.0 seconds
> debug1: Bytes per second: stdin 975.2, stdout 0.0, stderr 0.0
> debug1: Exit status 255
> debug1: compress outgoing: raw data 49, compressed 56, factor 1.14
> debug1: compress incoming: raw data 5, compressed 9, factor 1.80
> Connection closed
> 
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
> 


More information about the openssh-unix-dev mailing list