If you believe this is in error, please contact your system administrator.
”
For another message.

Thank you for your help. Greetings from Colombia

Thanks

Error: unknown user xxx

Occurs during SCP. Missing “nss* lib in chroot, copy /lib/nss_files.so.1 to chroot. (Solaris 10)

Error: connection closed

Occurs during SFTP. Missing *ksh* in chroot, copy /bin/ksh and/or /usr/bin/ksh to chroot

Error: connection closed

Occurs during SCP on Solaris 9. Missing *nss* lib in chroot, different library path than in Solaris 10. Copy /usr/lib/nss_files.so.1 to chroot.

Error: rssh_chroot_helper failed, Not owner

/usr/local/libexec/rssh_chroot_helper must be SUID root

Error: user attempted to execute forbidden commands; /usr/lib/ssh/sftp-server

Occurs during SFTP, logged in /var/adm/messages. Target system had both OpenSSH and SolarisSSH, error caused by conflict between rssh config and sshd_config. run ‘/usr/local/bin/rssh -v’ to get sftp server binary path, compare to ‘Subsystem sftp’ path in sshd_config (both config files, OpenSSH and SolarisSSH). Edit sshd_config to match rssh config.

Found a pretty good script file for setting up the chroot on Solaris…

CyberCiti : please post an article for the same.

“… ssh_chroot_helper[4470]: changing working directory to / (inside jail)”

but then getting a refused connection on your sftp client. *Trust other posters* in that it is a library issue… I thought it was bullshit myself and almost gave up hope (no aparent error on my /var/log/syslog). My last resort was to copy all the files in the /lib folder to the /chroot/lib folder. Use the -p and –preserve=link switches so you preserve permissions and links (otherwise linked libraries will be copied as a file…).

cp -v -p -d –preserve=link /lib/* /chroot/lib/

It *will* work… Now it’s a matter of deleting one by one (if you want) and figuring it out the minimum subset required. In my case (Ubuntu 11.04 server):
ld-2.12.1.so
ld-linux-x86-64.so.2
libc-2.12.1.so
libc.so.6
libnsl-2.12.1.so
libnsl.so.1
libnss_compat-2.12.1.so
libnss_compat.so.2

I also followed all previous suggestions in the earlier comments on this site (e.g., adding user to /chroot/etc/passwd… etcetera). Good hunting!

Status: Connected to x.x.x.x
Error: Connection closed by server with exitcode 1
Error: Could not connect to server

Probably one of the necessary lib files, passwd file, sftp-server, rssh_chroot_helper etc file is not readable or executable by that user.
Unfortunately I couldn’t figure out how to get logging activated to see what is missing, so from this point on you just need to check all these files for proper access rights.

But in your case it might be some other lib files missing.

I would try to run /usr/libexec/rssh_chroot_helper 2 “/usr/libexec/openssh/sftp-server”
from shell to see whether I get any error message. You might want to try with different users.

Also if the user (At least the user number )is not in the /chrootlibrary/etc/passwd file, then you will get the same error as above, but when you run it from shell it will tell you that couldn’t find the user id.

I hope it helps

After which the following shows up in my /var/log/messages

{code}
Apr 8 09:15:34 test-ftp rssh[11728]: setting log facility to LOG_USER
Apr 8 09:15:34 test-ftp rssh[11728]: allowing scp to all users
Apr 8 09:15:34 test-ftp rssh[11728]: allowing sftp to all users
Apr 8 09:15:34 test-ftp rssh[11728]: setting umask to 022
Apr 8 09:15:34 test-ftp rssh[11728]: chrooting all users to /users
Apr 8 09:15:34 test-ftp rssh[11728]: chroot cmd line: /usr/libexec/rssh_chroot_helper 2 “/usr/libexec/openssh/sftp-server”
Apr 8 09:15:34 test-ftp kernel: type=1104 audit(1302250534.943:2545183): user pid=11723 uid=0 auid=526 msg=’PAM: setcred acct=”testing” : exe=”/usr/sbin/sshd” (hostname=XX.XX.XX.XX, addr=XX.XX.XX.XX, terminal=ssh res=success)’
{code}

2> followed – Danilo Mota advise and made my passwd paths in the file relative to the enviroment.

I am still getting the errors above.

3> I copied the nesary files sugested in several comments down. content of my /users folder shown below.

{code}
drwx—— 2 root root 4096 Apr 7 16:56 bin
drwxr-x— 2 root root 4096 Apr 8 09:36 dev
drwx—— 3 root root 4096 Apr 7 16:43 etc
lrwxrwxrwx 1 root root 5 Apr 7 16:40 lib -> lib64
drwxr-xr-x 2 root root 4096 Apr 7 17:02 lib64
drwxr-xr-x 3 root root 4096 Apr 7 13:35 libexec
drwxr-xr-x 2 testing testing 4096 Apr 7 20:57 testing
drwxr-xr-x 5 root root 4096 Apr 7 14:05 usr

./bin:
total 1576
-rwx—— 1 root root 801512 Apr 7 16:56 bash
-rwx—— 1 root root 801512 Apr 7 16:56 sh

./dev:
total 0
srwxr-x— 1 root root 0 Apr 8 09:36 log
crwxr-x— 1 root root 1, 3 Apr 7 13:35 null

./etc:
total 76
-rwx—— 1 root root 36 Apr 8 09:49 group
-rwx—— 1 root root 100 Apr 7 13:37 hosts
-rwx—— 1 root root 47495 Apr 7 15:40 ld.so.cache
-rwx—— 1 root root 280 Apr 7 15:39 ld.so.conf
drwx—— 2 root root 4096 Apr 7 16:43 ld.so.conf.d
-rwx—— 1 root root 1696 Apr 7 15:40 nsswitch.conf
-rwx—— 1 root root 74 Apr 8 09:56 passwd
-rwx—— 1 root root 74 Apr 7 13:37 resolv.conf

./etc/ld.so.conf.d:
total 4
-rwx—— 1 root root 17 Oct 23 03:23 mysql-x86_64.conf

./lib64:
total 6852
-rwxr-xr-x 1 root root 139416 Apr 7 14:04 ld-linux-x86-64.so.2
-rwxr-xr-x 1 root root 10000 Apr 7 16:18 libcom_err.so.2
-rwxr-xr-x 1 root root 1366272 Apr 7 20:55 libcrypto.so.6
-rwxr-xr-x 1 root root 48600 Apr 7 20:55 libcrypt.so.1
-rwxr-xr-x 1 root root 1718120 Apr 7 20:55 libc.so.6
-rwxr-xr-x 1 root root 23360 Apr 7 20:55 libdl.so.2
-rwxr-xr-x 1 root root 190976 Apr 7 16:57 libgssapi_krb5.so.2
-rwxr-xr-x 1 root root 153720 Apr 7 17:01 libk5crypto.so.3
-rwxr-xr-x 1 root root 9728 Apr 7 16:18 libkeyutils.so.1
-rwxr-xr-x 1 root root 613896 Apr 7 16:58 libkrb5.so.3
-rwxr-xr-x 1 root root 35728 Apr 7 17:01 libkrb5support.so.0
-rwxr-xr-x 1 root root 114352 Apr 7 20:55 libnsl.so.1
-rwxr-xr-x 1 root root 233112 Apr 7 16:59 libnspr4.so
-rwxr-xr-x 1 root root 1231352 Apr 7 17:01 libnss3.so
-rwxr-xr-x 1 root root 53880 Apr 7 16:24 libnss_files-2.5.so
-rwxr-xr-x 1 root root 53880 Apr 7 16:53 libnss_files.so
-rwxr-xr-x 1 root root 53880 Apr 8 09:59 libnss_files.so.2
-rwxr-xr-x 1 root root 123152 Apr 7 17:02 libnssutil3.so
-rwxr-xr-x 1 root root 17992 Apr 7 16:54 libplc4.so
-rwxr-xr-x 1 root root 13960 Apr 7 17:00 libplds4.so
-rwxr-xr-x 1 root root 145824 Apr 7 16:18 libpthread.so.0
-rwxr-xr-x 1 root root 92736 Apr 7 20:55 libresolv.so.2
-rwxr-xr-x 1 root root 95464 Apr 7 16:18 libselinux.so.1
-rwxr-xr-x 1 root root 247496 Apr 7 16:18 libsepol.so.1
-rwxr-xr-x 1 root root 18152 Apr 7 20:55 libutil.so.1
-rwxr-xr-x 1 root root 85928 Apr 7 17:00 libz.so.1

./libexec:
total 4
drwxr-xr-x 2 root root 4096 Apr 7 13:35 openssh

./libexec/openssh:
total 0

./testing:
total 0

./usr:
total 12
drwxr-xr-x 2 root root 4096 Apr 7 17:03 bin
drwxr-xr-x 2 root root 4096 Apr 7 14:05 lib64
drwxr-xr-x 3 root root 4096 Apr 7 16:55 libexec

./usr/bin:
total 252
-rwxr-xr-x 1 root root 29712 Apr 7 15:05 rssh
-rwxr-xr-x 1 root root 57504 Apr 7 15:05 scp
-rwxr-xr-x 1 root root 96280 Apr 7 15:05 sftp
-rwxr-xr-x 1 root root 53072 Apr 7 17:03 sftp-server

./usr/lib64:
total 2680
-rwxr-xr-x 1 root root 190976 Apr 7 16:18 libgssapi_krb5.so.2
-rwxr-xr-x 1 root root 153720 Apr 7 16:18 libk5crypto.so.3
-rwxr-xr-x 1 root root 613896 Apr 7 16:18 libkrb5.so.3
-rwxr-xr-x 1 root root 35728 Apr 7 16:18 libkrb5support.so.0
-rwxr-xr-x 1 root root 233112 Apr 7 16:18 libnspr4.so
-rwxr-xr-x 1 root root 1231352 Apr 7 16:18 libnss3.so
-rwxr-xr-x 1 root root 123152 Apr 7 16:18 libnssutil3.so
-rwxr-xr-x 1 root root 17992 Apr 7 16:18 libplc4.so
-rwxr-xr-x 1 root root 13960 Apr 7 16:18 libplds4.so
-rwxr-xr-x 1 root root 85928 Apr 7 20:55 libz.so.1

./usr/libexec:
total 76
drwxr-xr-x 2 root root 4096 Apr 7 13:45 openssh
-rwsr-xr-x 1 root root 67691 Apr 7 16:55 rssh_chroot_helper

./usr/libexec/openssh:
total 56
-rwxr-xr-x 1 root root 53072 Apr 7 15:05 sftp-server
{code}

I am not sure what else to do – can anyone else provide any guidance?

Phuh, it took me 10 hours to figure out all issues,

I have the user in the passwd file with relative home directory as Danilo proposed.

I can run chroot cmd line: /usr/libexec/rssh_chroot_helper 2 “/usr/libexec/openssh/sftp-server” as root, no error message (after copied chroot/lib64/libnss_files.so.2).

Anybody has any other idea?
Naturally if I remove chrooting from rssh then sftp works fine with this user.

Can someone point me to some helpful troubleshooting tips? Or how to work out why users are able to go up levels and see all the folder structures I have created?