Date: Thu, 06 Jul 2006 16:07:30 -0700 From: Glenn Dawson <glenn@antimatter.net> To: patrick <gibblertron@gmail.com>, "Dan Rue" <drue@therub.org> Cc: freebsd-questions@freebsd.org Subject: Re: jail login and replication problems Message-ID: <7.0.1.0.2.20060706155922.05a865a8@antimatter.net> In-Reply-To: <b043a4850607061541s160e050fpb6f04e2bbf31d747@mail.gmail.co m> References: <20050726211516.GF95651@therub.org> <b043a4850607061541s160e050fpb6f04e2bbf31d747@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 03:41 PM 7/6/2006, patrick wrote: >Hi Dan, > >Did you ever find a solution to this problem? I've had the exact same >problem, and have tried various different things to resolve it... all >to no avail. It's really annoying have to remake the jail from scratch >every time, as I'd much rather do the configuration once, and use it >as a cookie-cutter for future jails. If you build the "template jail" in it's own partition and then dump(8) it to a file, you can then restore(8) it to where ever it needs to be and it will work fine. If you don't have an empty partition to use, you can use mdconfig(8) to create a vnode backed memory disk to build the template jail in. I just finished putting together a system with about 20 jails that were replicated that way. They all worked fine. -Glenn >Patrick > >On 7/26/05, Dan Rue <drue@therub.org> wrote: >>Greetings, >> >>I am setting up multiple jails on a machine. The first jail, everything >>works fine. If I add a user, that user can log in. If I tar cvzpf the >>jail, tar xvzpf to create a new one, some people can log into the new >>jail, and some can not. >> >>The user that can log in to the new one was the first user created (me), >>but any subsequent users can not log into new jails.. >> >>The symptom is right after accepting the password via ssh, the >>connection will just get dropped. I could not find any good error >>messages using ssh.. But if I enable telnet and try to telnet in, I >>receive this error in /var/log/messages: >> >>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>/home/user3/.login_conf: Permission denied >>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>/etc/login.conf: Permission denied >>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>/home/user3/.login_conf: Permission denied >>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>/etc/login.conf: Permission denied >> >>The permissions on those files are fine. >> >>So what would cause that error in jails that have been replicated using >>tar, but only to some users? I'm stumped.. >> >>Here's my rc.conf exerpt: >> >>jail_enable="YES" >>jail_list="jail3" >>jail_socket_unixiproute_only="NO" >>jail_sysvipc_allow="YES" # allow shared mem on all jails >> >>jail_jail3_rootdir="/jails/jail3" >>jail_jail3_hostname="jail3.example.com" >>jail_jail3_ip="10.0.0.203" >>jail_jail3_procfs_enable="YES" >>jail_jail3_devfs_enable="YES" >>jail_jail3_devfs_ruleset="devfsrules_jail" >> >>tia, >>Dan >>_______________________________________________ >>freebsd-questions@freebsd.org mailing list >>http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" >_______________________________________________ >freebsd-questions@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-questions >To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7.0.1.0.2.20060706155922.05a865a8>