From owner-freebsd-questions@FreeBSD.ORG Thu Dec 9 12:08:08 2010 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D01B61065697 for ; Thu, 9 Dec 2010 12:08:08 +0000 (UTC) (envelope-from reddvinylene@gmail.com) Received: from mail-qw0-f54.google.com (mail-qw0-f54.google.com [209.85.216.54]) by mx1.freebsd.org (Postfix) with ESMTP id 76DE58FC26 for ; Thu, 9 Dec 2010 12:08:08 +0000 (UTC) Received: by qwj9 with SMTP id 9so2503809qwj.13 for ; Thu, 09 Dec 2010 04:08:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=l30x09MxD9ZSb4X1JwzgmGP4FpnlQKa7rR4cyUy1EW4=; b=dQJcKBvg2Pi1FeRjViFmCjM7RXcZM+xvYISrH7VLysaDW7tQtXf73aDmnPXw4KYc4j SQrST1vaKIPaZyArP41gb5KkuiTWj5tllyGUWU6YDYs7hrWYZNV6H/aZMQ0DS+7AgpuD hbFgwSF3AS0dDelxruYD5grcmljSOpAeMBGos= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=WXT9a3LGz0njBkuBu9tu4Q+9IanbexiT0Xbu0zuTrMxOH2dV/y7EuMituxOL04tJC4 Bo7MtesUz5qba3fgz2pzajgBR9DdhDaRNDg/eMXIz4iaGdIxLf++hTWx+uTE6Xu8x2Q5 eGEEgWqBtUPq2+2lU0RwNf2vEbJHAiUyZFVH8= MIME-Version: 1.0 Received: by 10.229.91.147 with SMTP id n19mr7896696qcm.145.1291896487711; Thu, 09 Dec 2010 04:08:07 -0800 (PST) Received: by 10.229.217.210 with HTTP; Thu, 9 Dec 2010 04:08:07 -0800 (PST) In-Reply-To: References: <20101208155125.E6126@maildrop.int.zabbadoz.net> <20101208163047.S6126@maildrop.int.zabbadoz.net> <1865384339-1291839108-cardhu_decombobulator_blackberry.rim.net-1153938124-@bda947.bisx.prod.on.blackberry> Date: Thu, 9 Dec 2010 13:08:07 +0100 Message-ID: From: Redd Vinylene To: krad Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: joseph.bashe@gmail.com, questions , Chris Brennan Subject: Re: FTPD not working properly on jail X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Dec 2010 12:08:08 -0000 I'll create a new post. This subject is misleading. On Thu, Dec 9, 2010 at 12:55 PM, Redd Vinylene wrote: > On Wed, Dec 8, 2010 at 11:24 PM, krad wrote: > >> >> >> On 8 December 2010 20:07, Joseph Bashe wrote: >> >>> But he mentioned he needs some sort of 'virtual' (I'm assuming chroot) >>> feature; this is not possible with sftp afaik. >>> . >>> >> >> >> Its totally possble to chroot the sftp, and I have done it several times. >> Something like the below will isolate each user >> >> Match Group sftponly >> ChrootDirectory /home/chroot/%u >> >> X11Forwarding no >> AllowTcpForwarding no >> ForceCommand internal-sftp >> >> >> he might need something more like this so they can share data >> >> Match Group sftponly >> >> ChrootDirectory /home/chroot/ >> >> X11Forwarding no >> AllowTcpForwarding no >> ForceCommand internal-sftp >> >> >> > I would love to try that sometime - but right now I have to get this > regular ftp working. > > Just to recap - I'm trying to set up a virtual vsftpd-ssl-2.3.2 server so > my band can share new tracks, production material and what not, but my SSL > certificate keeps messing it up: http://pastie.org/1358536 - anybody know > why? It works just fine when I disable the SSL. > > Many thanks! > -- http://www.home.no/reddvinylene