Hi Tom,
Sorry, I am an idiot.  I was looking in syslog, not auth.log.  Here's
what I'm getting in auth.log:

Feb 23 20:06:49 hostname sshd[9634]: Accepted password for scponly from 
xx.xx.xx.xx port 32935 ssh2
Feb 23 20:06:49 hostname sshd[9636]: subsystem request for sftp
Feb 23 20:06:49 hostname [9637]: chrooted binary in place, will chroot()
Feb 23 20:06:49 hostname [9637]: 3 arguments in total.
Feb 23 20:06:49 hostname [9637]: ^Iarg 0 is scponlyc
Feb 23 20:06:49 hostname [9637]: ^Iarg 1 is -c
Feb 23 20:06:49 hostname [9637]: ^Iarg 2 is /usr/lib/sftp-server
Feb 23 20:06:49 hostname [9637]: opened log at LOG_AUTHPRIV, opts 0x00000009
Feb 23 20:06:49 hostname [9637]: retrieved home directory of "/home/scponly" 
for user "scponly"
Feb 23 20:06:49 hostname [9637]: chrooting to dir: "/home/scponly"
Feb 23 20:06:49 hostname [9637]: chdiring to dir: "/"
Feb 23 20:06:49 hostname [9637]: setting uid to 1004
Feb 23 20:06:49 hostname [9637]: processing request: "/usr/lib/sftp-server"
Feb 23 20:06:49 hostname [9637]: set HOME environment variable to 
HOME=/home/scponly (username: scponly(1004), IP/port: xx.xx.xx.xx 32935 22))
Feb 23 20:06:49 hostname [9637]: running: /usr/lib/sftp-server (username: 
scponly(1004), IP/port: xx.xx.xx.xx 32935 22)
Feb 23 20:06:49 hostname [9637]: failed: /usr/lib/sftp-server with error 
Permission denied(13) (username: scponly(1004), IP/port: xx.xx.xx.xx 32935 22)

Hope this helps.

Thanks,
Ben


On Wed, Feb 23, 2005 at 01:35:03PM +0100, Thomas Wana wrote:
> Ben Rasmussen wrote:
> > Package: scponly
> > Severity: important
> >
> > When using scponlyc, the connection is closed immediately 
> following
> > successful authentication.  This is scponly 4.0-1 on a 
> pure-sarge
> > machine.  setup-chroot.sh was used to create the user & 
> chroot.  If
> > user's shell is set to /usr/bin/scponly, user is able to 
> connect.
> 
> Hi,
> 
> did you try to increase the /etc/scponly/debuglevel and look 
> what's
> going on in the logs?
> 
> Tom


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to