From owner-freebsd-security  Sun Jan  6 15:15:15 2002
Delivered-To: freebsd-security@freebsd.org
Received: from poontang.schulte.org (poontang.schulte.org [209.134.156.197])
	by hub.freebsd.org (Postfix) with ESMTP
	id AEEFD37B417; Sun,  6 Jan 2002 15:15:06 -0800 (PST)
Received: from tarmap.nospam.schulte.org (tarmap.schulte.org [209.134.156.198])
	by poontang.schulte.org (Postfix) with ESMTP
	id 3AB4CD141E; Sun,  6 Jan 2002 17:15:05 -0600 (CST)
Message-Id: <5.1.0.14.0.20020106170130.02eb9898@pop3s.schulte.org>
X-Sender: 
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Sun, 06 Jan 2002 17:15:04 -0600
To: "David Kutcher" <david_kutcher@hotmail.com>,
	<security@FreeBSD.ORG>
From: Christopher Schulte <schulte+freebsd@nospam.schulte.org>
Subject: Re: Unable to configure with ssh-chrootmgr
Cc: questions@freebsd.org
In-Reply-To: <LAW2-OE46goZolmRBaY000062a4@hotmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Please followup to -questions, this is off topic for -security.

Are you sure you're running the OpenSSH ssh daemon on your system? 
ssh-chrootmgr is typically part of the ssh.com product, not OpenSSH.

To find out, type this command on your system

# telnet 127.0.0.1 22

At that point you'll be greeted by a version banner, which will identify 
your system as either OpenSSH or ssh.com.  Mine says (OpenSSH) for example

SSH-2.0-OpenSSH_2.3.0 FreeBSD localisations 20011202

A quick groups.google.com search brings up recent discussions on chrooting 
ssh logins, both with ssh.com and OpenSSH products.  I suggest you look 
there in greater detail.

At 05:42 PM 1/6/2002 -0500, David Kutcher wrote:
>I'm trying to restrict users who log in through SSH to their 
>/home/username directory only.  I have SSH Version OpenSSH_2.3.0 installed 
>on my machine.
>
>using the command:
>
>root# ssh-chrootmgr username1
>
>I get the error:
>
>/usr/local/bin/ssh-chrootmgr: 103: Syntax error: Bad fd number
>
>I've checked groups.google.com, no help.  Nothing on ssh.com's pages 
>either except for the instructions on how to install and use it at 
><http://www.ssh.com/products/ssh/administrator30/Using_Chroot_Manager__ssh-chrootmgr_.html>http://www.ssh.com/products/ssh/administrator30/Using_Chroot_Manager__ssh-chrootmgr_.html
>
>Any help would be appreciated!
>
>-David


--chris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message