chroot jail(w/ openssh) -- NEED LIBCRYPTO

Support for security such as Firewalls and securing linux

chroot jail(w/ openssh) -- NEED LIBCRYPTO

Postby goillini » 2007/11/04 04:02:02

Hey,
I would like to jail my users and found this(seemingly) great tutorial: http://www.technicalarticles.org/index. ... hroot_Jail
I created a test server to install and get it down so I can do it quickly on my production server. The server was a minimum install from a CentOS 4.4 ServerCD. I have followed the following commands:
Code: Select all
tar -xvf openssh-4.2p1-chroot.tar.gz
cd openssh-4.2p1-chroot
./configure --without-zlib-version-check
yum install gcc
./configure --without-zlib-version-check
cd /root
wget http://www.zlib.net/zlib-1.2.3.tar.gz
tar xvfz zlib-1.2.3.tar.gz
cd zlib-1.2.3
./configure
make test
make install
cd /root/openssh-4.2p1-chroot
./configure --without-zlib-version-check
rpm -Uhv http://apt.sw.be/packages/rpmforge-release/rpmforge-release-0.3.6-1.el4.rf.i386.rpm
yum update openssl

each time I try to configure I get more and more dependencies I'm missing. First GCC then zlib and now libcrypto. I have the newest version of openssl and I have the following files in /lib:
libcrypt.so.1
libcrypt-2.3.4.so
libcrypto.so.0.9.7a
libcrypto.so.4
(link file to ... nowhere?)

I cant find a way to install this file and I'm sure that even if i can get it installed that there will be more that I will have problems with. Is there a better tutorial that I just cant seem to find? Is there a better way to install the openssh chroot(rpm dl or in a repo somewhere?)?
I don't need anything fancy because I only have a few users, but I'de just like to be able to jail these few users to their home dir and still allow them to login through sftp(i have them all using winSCP)

Thanks,
Adam

p.s. Ive tried jailkit and had a lot of problems with it. I couldnt find any centos/rhel specific install instructions and their website seems outdated with what the commands actually do.
goillini
 
Posts: 6
Joined: 2007/05/24 01:59:11

Re: chroot jail(w/ openssh) -- NEED LIBCRYPTO

Postby goillini » 2008/05/07 03:53:39

Hey I found a solution. I also wrote a tutorial on the matter.
For OpenSSH 4 the tutorial can be found here: http://adamsworld.name/chrootjail.php
For OpenSSH 5 the tutorial can be found here: http://adamsworld.name/chrootjail5.php

The OpenSSH 5 tutorial is much easier to follow and is much less convoluted then the OpenSSH 4 version. I wrote this to help others who may have the same problem.

Enjoy,
-Adam
goillini
 
Posts: 6
Joined: 2007/05/24 01:59:11

Re: chroot jail(w/ openssh) -- NEED LIBCRYPTO

Postby drsys » 2008/07/09 10:13:35

the webpage is down
can you please email me the tutorial on nikolazx@gmail.com
thanks m8
drsys
 
Posts: 4
Joined: 2008/07/09 08:58:02
Location: Greece

Re: chroot jail(w/ openssh) -- NEED LIBCRYPTO

Postby kirthanshetty » 2011/12/29 11:44:54

Hi,
i'm unable to install zilb from wget http://www.zlib.net/zlib123.zip
as it was mentioned in your link http://adamsworld.name/chrootjail5.php
please help me....
kirthanshetty
 
Posts: 1
Joined: 2011/12/24 16:47:41

Re: chroot jail(w/ openssh) -- NEED LIBCRYPTO

Postby goillini » 2012/01/04 04:41:59

Hey,
You can try:
http://zlib.net/zlib125.zip

They finally got around to updating that package! (after years)


-Adam
goillini
 
Posts: 6
Joined: 2007/05/24 01:59:11


Return to CentOS 4 - Security Support

Who is online

Users browsing this forum: No registered users and 0 guests