Koozali.org: home of the SME Server

SFTP Access No longer

Offline Smitro

  • *
  • 350
  • +0/-0
SFTP Access No longer
« on: February 09, 2007, 08:48:18 AM »
Hi all,

I've had my users connecting via SFTP to upload files to there websites. For some reason this has just stopped. I'm not sure exactly when it stopped but it may have had something to do with upgrading to v7.1

I had dungog package:
smeserver-remoteuseraccess-1.2-6.noarch.rpm
but then when I got this error, I went looking and found an upgrade, so I upgraded over the top with:
smeserver-remoteuseraccess-1.2-10.noarch.rpm

Users can't login when they only have RSSH + VPN access. But when I give them Shell Access it works no problem.

When using CoreFTP this is the error I get.

Quote
looking up host "domain.removed"
Connecting to 192.168.1.254 port 22
Server version: SSH-1.99-OpenSSH_3.9p1
version: SSH-2.0-SSH-Local: Mar 31 2005 11:27:49
Using SSH protocol version 2
processing group exchange
processing key exchange
Host key fingerprint is:
ssh-rsa 1024 <key removed>
Initialized AES-256 client->server encryption
Initialized AES-256 server->client encryption
Sent password
Access granted
Opened channel for session
Started shell session
Server sent command exit status 0
All channels closed. Disconnecting
Unable to initialize SFTP: 潣汵⁤潮⁴潣湮捥t (sftp not enabled?)
Can't establish connection --> domain.removed:22 @ Fri Feb 09 17:33:53


I'm lost as where to start on this one?
.........

Offline stephen noble

  • *
  • 607
  • +1/-0
    • Dungog
SFTP Access No longer
« Reply #1 on: February 11, 2007, 04:14:08 AM »
is the db value set
does it update the rssh.conf file
if sftp doesn't work report a bug

[root@kiwi SOURCES]# cat /etc/rssh.conf
logfacility = LOG_USER
umask = 022
user = mm:022:11111:

[root@kiwi SOURCES]# db accounts show mm
mm=user
    Shell=/usr/bin/rssh
    Street=Long Tan
    Sudoer=no
    Uid=5011
    VPNClientAccess=yes

Offline Smitro

  • *
  • 350
  • +0/-0
SFTP Access No longer
« Reply #2 on: February 11, 2007, 12:07:37 PM »
Both of these contain the same variables as you have said and a few extras.

I've also checked and when you change the users access from RSSH to Shell Access the variables change. So it's obviously updating it's self ok. And as soon as I change the user from Shell access to RSSH + VPN the user gets the error message as above. As soon as I change the user back to Shell Access, they can login without a problem.

I'll add a bug report I guess. Weird thing is that it use to work.
.........

Offline stephen noble

  • *
  • 607
  • +1/-0
    • Dungog
SFTP Access No longer
« Reply #3 on: February 11, 2007, 01:18:58 PM »
Things change constantly

Offline okepc

  • ****
  • 118
  • +0/-0
    • http://www.okepc.nl
SFTP Access No longer
« Reply #4 on: February 12, 2007, 10:42:51 AM »
This happened to me also.
After investigating the matter i was hacked through a php script which was in a old outdated php app.
After the hack things were screwed and i couldn't use sftp anymore.

I did a format and a clean install.

Dirk

Offline CharlieBrady

  • *
  • 6,918
  • +3/-0
Re: SFTP Access No longer
« Reply #5 on: February 13, 2007, 04:19:48 AM »
Quote from: "Smitro"

I've had my users connecting via SFTP to upload files to there websites. For some reason this has just stopped.


Please report all problems via the Bug Tracker, and only there. Thanks.

Offline Smitro

  • *
  • 350
  • +0/-0
SFTP Access No longer
« Reply #6 on: February 13, 2007, 11:54:49 AM »
Quote
Please report all problems via the Bug Tracker, and only there.

I didn't know it was a bug till after I asked here.

I've submitted the bug here:  http://bugs.contribs.org/show_bug.cgi?id=2470
.........

Offline skydivers

  • *
  • 178
  • +0/-0
SFTP Access No longer
« Reply #7 on: February 17, 2007, 03:23:52 PM »
I experience the same problem.
WinSCP gives the following error: Is the host running a ftp server?

If I give shell access -> no prob

I'm also using the 1.2-10 contrib from dungog.

Greetz

Offline stephen noble

  • *
  • 607
  • +1/-0
    • Dungog
SFTP Access No longer
« Reply #8 on: February 18, 2007, 12:07:31 AM »
comments to the above bug please