From owner-freebsd-questions@FreeBSD.ORG  Tue Jul 26 21:15:18 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1336916A41F
	for <freebsd-questions@freebsd.org>;
	Tue, 26 Jul 2005 21:15:18 +0000 (GMT) (envelope-from drue@therub.org)
Received: from cenn.mc.mpls.visi.com (cenn.mc.mpls.visi.com [208.42.156.9])
	by mx1.FreeBSD.org (Postfix) with ESMTP id C6C1843D45
	for <freebsd-questions@freebsd.org>;
	Tue, 26 Jul 2005 21:15:17 +0000 (GMT) (envelope-from drue@therub.org)
Received: from egypt.therub.org (therub.org [209.98.146.43])
	by cenn.mc.mpls.visi.com (Postfix) with ESMTP id 448B08106
	for <freebsd-questions@freebsd.org>;
	Tue, 26 Jul 2005 16:15:17 -0500 (CDT)
Received: by egypt.therub.org (Postfix, from userid 1001)
	id 05BB5456577; Tue, 26 Jul 2005 16:15:17 -0500 (CDT)
Date: Tue, 26 Jul 2005 16:15:16 -0500
From: Dan Rue <drue@therub.org>
To: freebsd-questions@freebsd.org
Message-ID: <20050726211516.GF95651@therub.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4.2.1i
Subject: jail login and replication problems
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 26 Jul 2005 21:15:18 -0000

Greetings, 

I am setting up multiple jails on a machine.  The first jail, everything
works fine.  If I add a user, that user can log in.  If I tar cvzpf the
jail, tar xvzpf to create a new one, some people can log into the new
jail, and some can not.

The user that can log in to the new one was the first user created (me),
but any subsequent users can not log into new jails..  

The symptom is right after accepting the password via ssh, the
connection will just get dropped.  I could not find any good error
messages using ssh..  But if I enable telnet and try to telnet in, I
receive this error in /var/log/messages: 

Jul 26 16:11:46 jail3 login: _secure_path: cannot stat /home/user3/.login_conf: Permission denied
Jul 26 16:11:46 jail3 login: _secure_path: cannot stat /etc/login.conf: Permission denied
Jul 26 16:11:46 jail3 login: _secure_path: cannot stat /home/user3/.login_conf: Permission denied
Jul 26 16:11:46 jail3 login: _secure_path: cannot stat /etc/login.conf: Permission denied

The permissions on those files are fine.  

So what would cause that error in jails that have been replicated using
tar, but only to some users?  I'm stumped.. 

Here's my rc.conf exerpt: 

jail_enable="YES"
jail_list="jail3"
jail_socket_unixiproute_only="NO"
jail_sysvipc_allow="YES"  # allow shared mem on all jails

jail_jail3_rootdir="/jails/jail3"
jail_jail3_hostname="jail3.example.com"
jail_jail3_ip="10.0.0.203"
jail_jail3_procfs_enable="YES"
jail_jail3_devfs_enable="YES"
jail_jail3_devfs_ruleset="devfsrules_jail"

tia,
Dan