jail login and replication problems

[Glenn Dawson]

At 03:41 PM 7/6/2006, patrick wrote:
>Hi Dan,
>
>Did you ever find a solution to this problem? I've had the exact same
>problem, and have tried various different things to resolve it... all
>to no avail. It's really annoying have to remake the jail from scratch
>every time, as I'd much rather do the configuration once, and use it
>as a cookie-cutter for future jails.

If you build the "template jail" in it's own partition and then 
dump(8) it to a file, you can then restore(8) it to where ever it 
needs to be and it will work fine.

If you don't have an empty partition to use, you can use mdconfig(8) 
to create a vnode backed memory disk to build the template jail in.

I just finished putting together a system with about 20 jails that 
were replicated that way.  They all worked fine.

-Glenn


>Patrick
>
>On 7/26/05, Dan Rue <drue at therub.org> wrote:
>>Greetings,
>>
>>I am setting up multiple jails on a machine.  The first jail, everything
>>works fine.  If I add a user, that user can log in.  If I tar cvzpf the
>>jail, tar xvzpf to create a new one, some people can log into the new
>>jail, and some can not.
>>
>>The user that can log in to the new one was the first user created (me),
>>but any subsequent users can not log into new jails..
>>
>>The symptom is right after accepting the password via ssh, the
>>connection will just get dropped.  I could not find any good error
>>messages using ssh..  But if I enable telnet and try to telnet in, I
>>receive this error in /var/log/messages:
>>
>>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat 
>>/home/user3/.login_conf: Permission denied
>>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat 
>>/etc/login.conf: Permission denied
>>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat 
>>/home/user3/.login_conf: Permission denied
>>Jul 26 16:11:46 jail3 login: _secure_path: cannot stat 
>>/etc/login.conf: Permission denied
>>
>>The permissions on those files are fine.
>>
>>So what would cause that error in jails that have been replicated using
>>tar, but only to some users?  I'm stumped..
>>
>>Here's my rc.conf exerpt:
>>
>>jail_enable="YES"
>>jail_list="jail3"
>>jail_socket_unixiproute_only="NO"
>>jail_sysvipc_allow="YES"  # allow shared mem on all jails
>>
>>jail_jail3_rootdir="/jails/jail3"
>>jail_jail3_hostname="jail3.example.com"
>>jail_jail3_ip="10.0.0.203"
>>jail_jail3_procfs_enable="YES"
>>jail_jail3_devfs_enable="YES"
>>jail_jail3_devfs_ruleset="devfsrules_jail"
>>
>>tia,
>>Dan
>>_______________________________________________
>>freebsd-questions at freebsd.org mailing list
>>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>_______________________________________________
>freebsd-questions at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"