From owner-freebsd-stable@FreeBSD.ORG Thu Oct 4 08:20:30 2007 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AF8B316A419 for ; Thu, 4 Oct 2007 08:20:30 +0000 (UTC) (envelope-from tevans.uk@googlemail.com) Received: from fk-out-0910.google.com (fk-out-0910.google.com [209.85.128.187]) by mx1.freebsd.org (Postfix) with ESMTP id 2F6A813C467 for ; Thu, 4 Oct 2007 08:20:29 +0000 (UTC) (envelope-from tevans.uk@googlemail.com) Received: by fk-out-0910.google.com with SMTP id b27so101423fka for ; Thu, 04 Oct 2007 01:20:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:subject:from:to:cc:in-reply-to:references:content-type:date:message-id:mime-version:x-mailer; bh=bHgCDoW7D2lYLnKwevot+Ca3hOGVVna4uzLMuGfojCs=; b=mpiOj/T2EQNcCEio+adGGzpvIEF+tPcrx8L3Cb3gIMoJkpBc5DNgfsTF45sEhTekT0cGG49AYAxm+tJlv/a7TusxX7NeXCuL7jub4xXvqwwl04uHLY9KELMFDBfV9t4a4nV1nyRaT7dgz6yfaeItsxhbOM6HifozkVr3tJwunRE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:subject:from:to:cc:in-reply-to:references:content-type:date:message-id:mime-version:x-mailer; b=pbom74W49q11HwVto2FZcTiMlWJPnM/hUFl2b7BE0nDB9QZBD/iGRuhK02/QgG9SoJaXdK6V0z7wEfe2mlDmygjOTYFZA1pmecFFTxh//Qy2gux7BHq54GkVz6ZGUBF7KKi/cq1UAHxI2FDBxNGBmwuazygbngIb40Cnf1PaIXE= Received: by 10.82.156.12 with SMTP id d12mr9788695bue.1191486028259; Thu, 04 Oct 2007 01:20:28 -0700 (PDT) Received: from ?127.0.0.1? ( [217.206.187.79]) by mx.google.com with ESMTPS id 31sm8147650nfu.2007.10.04.01.20.26 (version=SSLv3 cipher=RC4-MD5); Thu, 04 Oct 2007 01:20:26 -0700 (PDT) From: Tom Evans To: Kim Attree In-Reply-To: <4704A17E.6030703@za.verizonbusiness.com> References: <1191428709.1475.26.camel@localhost> <4703CA06.7050103@delphij.net> <4704A17E.6030703@za.verizonbusiness.com> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-mudIm9PVYjReKOpZ60u+" Date: Thu, 04 Oct 2007 09:20:25 +0100 Message-Id: <1191486025.1475.33.camel@localhost> Mime-Version: 1.0 X-Mailer: Evolution 2.10.2 FreeBSD GNOME Team Port Cc: freebsd-stable@freebsd.org, freebsd-jail@freebsd.org, d@delphij.net Subject: Re: Cannot ssh from jail X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Oct 2007 08:20:30 -0000 --=-mudIm9PVYjReKOpZ60u+ Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Thu, 2007-10-04 at 10:17 +0200, Kim Attree wrote: > LI Xin wrote: > > Tom Evans wrote: > > =20 > >> Hi stable@, jail@ [jail@ plz cc me as I'm not subscribed] > >> > >> I'm having some problems setting up some jails for semi-isolated > >> development (ie, so we can isolate the developers into a jail, give th= em > >> all the root access they want, and not worry about them blowing up mor= e > >> than their own jail) on 6.2-RELEASE-p5. > >> > >> I have set up a jail, using ezjail, which appeared to work fine. I can > >> start the jail, and use jexec to spawn a shell inside the jail. Howeve= r, > >> if I then try to ssh from the jail to another box, ssh fails with the > >> error message (with -v): > >> =20 > > > > I think the problem is that if you jexec into a jail then you don't hav= e > > a TTY at hand, so bad things would happen. If you login into the jail > > by some ways (e.g. by ssh or telnet or whatever that spawns a TTY for > > you) then it would work I bet. > > > > Cheers, > > =20 > I had the same problem, setup SSHD in the jail, ssh'ed into that, and > then from there got a TTY and could ssh to anywhere. >=20 > Li is right, with jexec you don't get allocated a TTY. >=20 > Laters, >=20 > Kim Thanks guys, that works perfectly Cheers Tom --=-mudIm9PVYjReKOpZ60u+ Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQBHBKJFlcRvFfyds/cRAr7tAKCTYi3f7cNrIU0S+pemjoLVCNjm6ACeMggo gKmg8sVbCN9w2J1m7v8HaQM= =QHGB -----END PGP SIGNATURE----- --=-mudIm9PVYjReKOpZ60u+--