Re: AIX restricted shell & OpenSSH

From: Darren Tucker (dtucker@dodgy.net.au)
Date: 02/25/03 

From: dtucker@dodgy.net.au (Darren Tucker)
Date: Tue, 25 Feb 2003 08:11:45 GMT

In article <3E5A14EA.35AA215C@teleline.es>, <albertpz@teleline.es> wrote:
>I have an AIX 4.3.3 with OpenSSH 3.4p1 installed. I set up an account
>with restricted shell /usr/bin/Rsh and I can do terminal conection with
>Putty to this account, however, when starting a psftp connection I can't
>get into the system getting the message "unable to initialise SFTP:
>could not connect".

The problem is probably that the restricted shell does not permit
running executables with an absolute path while the default "Subsystem"
definition in sshd_config contains an absolute path.

Try copying sftp-server to somewhere in the restricted shell's path and
change the "Subsystem" line in sshd_config to be

Subsystem sftp sftp-server

then restart sshd. 

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

Relevant Pages

  • Re: Concept-oriented programming
    ... The standard OOA/D approach is to encapsulate the database access mechanisms in a separate subsystem that understands the particular storage paradigm. ... When an Account object needs to be created in the account management subsystem a factory object will invoke getAccountData and instantiate the object with the returned data. ... As I understand CoP, one would create an Account reference with the various getBalance and whatnot accessors that the account management subsystem would use. ...
    (comp.object)
  • Re: Concept-oriented programming
    ... account numbers or person SSNs. ... have to use primitive references for representing objects if we have ... I don't see indirection for its own sake is not a valid justification. ... I don't see anyway to do that within a subsystem except as part of the subsystem implementation. ...
    (comp.object)
  • Re: Decouple SQL queries from class in OOP design
    ... because it limits the usability of the classes and bound them to the local database schema. ... Typically that is done by encapsulating the DB access in a subsystem that has a generic data transfer interface based on the problem solution's data access needs. ... The subsystem will have to have a mapping to know that saveAccount maps to the "Account" table, accountID maps to the "Account Name" field, value1 maps to the "current balance" field, and so on. ...
    (comp.object)
  • RE: allow only sftp?
    ... > assume is whatever one the ssh docs tell him it will be. ... because it takes into account the user's environment. ... ${SUBSYSTEM) from the administrative view point (Read: ... I sure the hell don't want him running random ...
    (SSH)