Date: Fri, 7 Jul 2006 01:00:10 -0600 From: "Chad Leigh -- Shire.Net LLC" <chad@shire.net> To: Philippe Lang <philippe.lang@attiksystem.ch> Cc: Free BSD Questions list <freebsd-questions@freebsd.org> Subject: Re: jail login and replication problems Message-ID: <482FAEE3-4457-46F0-89B2-C1F86F6FBBAC@shire.net> In-Reply-To: <6C0CF58A187DA5479245E0830AF84F421D0ED9@poweredge.attiksystem.ch> References: <6C0CF58A187DA5479245E0830AF84F421D0ED9@poweredge.attiksystem.ch>
next in thread | previous in thread | raw e-mail | index | archive | help
On Jul 7, 2006, at 12:41 AM, Philippe Lang wrote: > owner-freebsd-questions@freebsd.org wrote: > >> Hi Dan, >> >> Did you ever find a solution to this problem? I've had the >> exact same problem, and have tried various different things >> to resolve it... all to no avail. It's really annoying have >> to remake the jail from scratch every time, as I'd much >> rather do the configuration once, and use it as a >> cookie-cutter for future jails. > > Hi, > > For duplicating jail, use the utility called "cpdup". Tar does not > work for this. Why not? I use it (though in a modified way -- I tar a base jail without /bin /usr etc but with /etc etc and then I use nullfs mounts to duplicate one base jail install. But my /etc in each jail is copied with tar (as is a bunch of stuff including the base / with dirs for usr bin sbin etc) and it works Chad > > Bye > > Philippe > >> Patrick >> >> On 7/26/05, Dan Rue <drue@therub.org> wrote: >>> Greetings, >>> >>> I am setting up multiple jails on a machine. The first jail, >>> everything works fine. If I add a user, that user can log in. If I >>> tar cvzpf the jail, tar xvzpf to create a new one, some people can >>> log into the new jail, and some can not. >>> >>> The user that can log in to the new one was the first user created >>> (me), but any subsequent users can not log into new jails.. >>> >>> The symptom is right after accepting the password via ssh, the >>> connection will just get dropped. I could not find any good error >>> messages using ssh.. But if I enable telnet and try to telnet in, I >>> receive this error in /var/log/messages: >>> >>> Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>> /home/user3/.login_conf: Permission denied Jul 26 16:11:46 jail3 >>> login: _secure_path: cannot stat /etc/login.conf: Permission denied >>> Jul 26 16:11:46 jail3 login: _secure_path: cannot stat >>> /home/user3/.login_conf: Permission denied Jul 26 16:11:46 jail3 >>> login: _secure_path: cannot stat /etc/login.conf: Permission denied >>> >>> The permissions on those files are fine. >>> >>> So what would cause that error in jails that have been replicated >>> using tar, but only to some users? I'm stumped.. >>> >>> Here's my rc.conf exerpt: >>> >>> jail_enable="YES" >>> jail_list="jail3" >>> jail_socket_unixiproute_only="NO" >>> jail_sysvipc_allow="YES" # allow shared mem on all jails >>> >>> jail_jail3_rootdir="/jails/jail3" >>> jail_jail3_hostname="jail3.example.com" >>> jail_jail3_ip="10.0.0.203" >>> jail_jail3_procfs_enable="YES" >>> jail_jail3_devfs_enable="YES" >>> jail_jail3_devfs_ruleset="devfsrules_jail" >>> >>> tia, >>> Dan >>> _______________________________________________ >>> freebsd-questions@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >>> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" >>> >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to >> "freebsd-questions-unsubscribe@freebsd.org" > > > --------------- > Philippe Lang > Attik System > --- Chad Leigh -- Shire.Net LLC Your Web App and Email hosting provider chad at shire.net
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?482FAEE3-4457-46F0-89B2-C1F86F6FBBAC>