SFTP jails for dummies

i.e the dummy would be me!

I have been working my way through this and its driving me nuts as so much is assumed: http://library.linode.com/security/sftp-jails/

Did the file changes.

I have a user 'dave' and dave is part of the group 'filetransfer', this is all fine.

usermod -G filetransfer dave

chown root:root /srv/www/website_name.com

chmod 755 /srv/www/website_name.com

Next bit

cd /srv/www/website_name.com

mkdir docs public_html <–----- skipped this as I already have one

chown username:usergroup

The chown username:usergroup <---- does this mean I have to put chown dave:filetransfer ? (I did try it and had no luck)

So after all that I use the SFTP on cyberduck - am I gathering that the server is the linode IP address, username is dave and the password the one for that account. It just disconnects me..

any ideas?

4 Replies

@crazyfruitbat:

usermod -G filetransfer dave

chown username:usergroup

The chown username:usergroup <–-- does this mean I have to
I'm guessing in this case it would be dave:dave

@kangaby:

@crazyfruitbat:

usermod -G filetransfer dave

chown username:usergroup

The chown username:usergroup <–-- does this mean I have to
I'm guessing in this case it would be dave:dave

Cheers but that isn't working either. it just disconnects - I have tried this so many times now…

Try looking in your /var/log/auth.log - openssh should display why it denies a connection.

Wow - lots of logs in that!

Feb 27 10:53:33 server sshd[2167]: Accepted password for root from xxx.xx.xxx.xxx port 60646 ssh2
Feb 27 10:53:33 server sshd[2167]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 10:53:33 server sshd[2167]: pam_unix(sshd:session): session opened for user root by (uid=0)
Feb 27 10:53:33 server sshd[2167]: subsystem request for sftp
Feb 27 10:53:33 server sshd[2179]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 10:56:13 server sshd[2188]: Accepted password for root from xxx.xx.xxx.xxx port 60693 ssh2
Feb 27 10:56:13 server sshd[2188]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 10:56:13 server sshd[2188]: pam_unix(sshd:session): session opened for user root by (uid=0)
Feb 27 10:56:13 server sshd[2188]: subsystem request for sftp
Feb 27 10:56:13 server sshd[2200]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 10:56:17 server sshd[2188]: Received disconnect from xxx.xx.xxx.xxx: 11: Closed due to user request.
Feb 27 10:56:17 server sshd[2188]: pam_unix(sshd:session): session closed for user root
Feb 27 10:56:17 server sshd[2188]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 11:06:27 server sshd[2240]: Accepted password for root from xxx.xx.xxx.xxx port 60880 ssh2
Feb 27 11:06:27 server sshd[2240]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory
Feb 27 11:06:27 server sshd[2240]: pam_unix(sshd:session): session opened for user root by (uid=0)
Feb 27 11:06:27 server sshd[2240]: subsystem request for sftp
Feb 27 11:06:27 server sshd[2253]: pam_env(sshd:setcred): Unable to open env file: /etc/default/locale: No such file or directory

This was just a small part.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct