pam_chroot

[Peter Pentchev]

On Tue, Jan 13, 2004 at 12:38:28AM -0800, Nick Twaddell wrote:
> Has anyone got the pam_chroot module to successfully work in FreeBSD?  I
> have FreeBSD 5.2-RELEASE installed.  I copied the appropriate binaries and
> libraries into my chroot, I can chroot -u test -g test /home/test
> /usr/local/bin/bash and it works perfectly.  So now I am trying to get the
> pam module to work.  I added
> session                required        pam_chroot.so           debug
> into the /etc/pam.d/sshd file.  I changed my passwd file so my home dir is
> /home/test/./
> 
> when I try to login as that user, it just kicks me right now.  There are no
> errors in the log :(  
> 
> Connection to wp1 closed by remote host.
> Connection to wp1 closed.
> 
> Maybe someone in here can help.

What do you mean 'try to login as that user' - try to login as 'test',
or something else?

Do you have passwd, master.passwd, group, pwd.db and spwd.db files in
the /home/test/etc/ directory?  If not, copy the passwd, master.passwd
and group files from your /etc/ directory, remove the entries you do not
really need, then run pwd_mkdb /home/test/etc/master.passwd to build
the pwd.db and spwd.db files.

If that doesn't work, can you post the output of 'find /home/test -ls'

G'luck,
Peter

-- 
Peter Pentchev	roam at ringlet.net    roam at sbnd.net    roam at FreeBSD.org
PGP key:	http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint	FDBA FD79 C26F 3C51 C95E  DF9E ED18 B68D 1619 4553
The rest of this sentence is written in Thailand, on
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20040113/e85d6acd/attachment.bin