{"action":"created","issue":{"url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/37","labels_url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/37/labels{/name}","comments_url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/37/comments","events_url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/37/events","html_url":"https://github.com/mysecureshell/mysecureshell/issues/37","id":128599732,"number":37,"title":"Can't connect to sftp server","user":{"login":"bellera","id":8041180,"avatar_url":"https://avatars.githubusercontent.com/u/8041180?v=3","gravatar_id":"","url":"https://api.github.com/users/bellera","html_url":"https://github.com/bellera","followers_url":"https://api.github.com/users/bellera/followers","following_url":"https://api.github.com/users/bellera/following{/other_user}","gists_url":"https://api.github.com/users/bellera/gists{/gist_id}","starred_url":"https://api.github.com/users/bellera/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bellera/subscriptions","organizations_url":"https://api.github.com/users/bellera/orgs","repos_url":"https://api.github.com/users/bellera/repos","events_url":"https://api.github.com/users/bellera/events{/privacy}","received_events_url":"https://api.github.com/users/bellera/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-01-25T17:58:40Z","updated_at":"2016-01-25T20:12:12Z","closed_at":null,"body":"Ubuntu Server 14.04 LTS 64 bit\r\nmysecureshell installed from git on 14-January-2016\r\nFileZilla Client from any client (Ubuntu, Windows...)\r\n\r\n* Using bash no problem connecting to the server.\r\n* ssh connection works until receiving the message thar shell is disabled.\r\n* Users are chrooted using mysecureshell. No groups configured at sftp_config\r\n* Using mysecureshell I have one user that it works (?). Others users not. Strange. I can't see any differences between user OK and users KO. In fact, I rename the home for the user working and new login created a new time its home. But sftp didn't worked after. I went back and I could connect a new time. I don't understand why (only) one user works and (the) others not.\r\n\r\nFILEZILLA  TRACE FOR USER THAT IT WORKS ======================================\r\nCommand:\tPass: ********\r\nTrace:\tSent password\r\nTrace:\tAccess granted\r\nTrace:\tOpened channel for session\r\nTrace:\tStarted a shell/command\r\nStatus:\tConnected to mysftpserver.dom\r\nTrace:\tCSftpControlSocket::ConnectParseResponse()\r\nTrace:\tCSftpControlSocket::ResetOperation(0)\r\nTrace:\tCControlSocket::ResetOperation(0)\r\nTrace:\tCFileZillaEnginePrivate::ResetOperation(0)\r\nStatus:\tRetrieving directory listing...\r\nTrace:\tCSftpControlSocket::SendNextCommand()\r\nTrace:\tCSftpControlSocket::ChangeDirSend()\r\nCommand:\tpwd\r\nResponse:\tCurrent directory is: \"/\"\r\nTrace:\tCSftpControlSocket::ResetOperation(0)\r\nTrace:\tCControlSocket::ResetOperation(0)\r\nTrace:\tCSftpControlSocket::ParseSubcommandResult(0)\r\nTrace:\tCSftpControlSocket::ListSubcommandResult()\r\nTrace:\t  state = 1\r\nTrace:\tCSftpControlSocket::SendNextCommand()\r\nTrace:\tCSftpControlSocket::ListSend()\r\nTrace:\t  state = 2\r\nCommand:\tls\r\nStatus:\tListing directory /\r\n\r\nFILEZILLA TRACE FOR USER THAT IT FAILS (CASE 1 - WITH EXITCODE) =================\r\nCommand:\tPass: ********\r\nTrace:\tSent password\r\nTrace:\tAccess granted\r\nTrace:\tOpened channel for session\r\nTrace:\tStarted a shell/command\r\nStatus:\tConnected to mysftpserver.dom\r\nTrace:\tServer sent command exit status 14\r\nError:\tConnection closed by server with exitcode 14\r\nTrace:\tCControlSocket::DoClose(64)\r\nTrace:\tCSftpControlSocket::ResetOperation(66)\r\nTrace:\tCControlSocket::ResetOperation(66)\r\nError:\tCould not connect to server\r\nTrace:\tCFileZillaEnginePrivate::ResetOperation(66)\r\n\r\nFILEZILLA TRACE FOR USER THAT IT FAILS (CASE 2 - NO EXITCODE) ===================\r\nCommand:\tPass: ********\r\nTrace:\tSent password\r\nTrace:\tAccess granted\r\nTrace:\tOpened channel for session\r\nTrace:\tStarted a shell/command\r\nStatus:\tConnected to mysftpserver.dom\r\nTrace:\tCControlSocket::DoClose(64)\r\nTrace:\tCSftpControlSocket::ResetOperation(66)\r\nTrace:\tCControlSocket::ResetOperation(66)\r\nError:\tCould not connect to server\r\nTrace:\tCFileZillaEnginePrivate::ResetOperation(66)\r\n\r\nMY sftp_config ==================================================================\r\n<Default>\r\n\tGlobalDownload\t\t0\t#total speed download for all clients\r\n\tGlobalUpload\t\t0\t#total speed download for all clients (0 for unlimited)\r\n\tDownload \t\t0\t#limit speed download for each connection\r\n\tUpload \t\t\t0\t#unlimit speed upload for each connection\r\n\tStayAtHome\t\ttrue\t#limit client to his home\r\n\tVirtualChroot\t\ttrue\t#fake a chroot to the home account\r\n\tLimitConnection\t\t1000\t#max connection for the server sftp\r\n\tLimitConnectionByUser\t5\t#max connection for the account\r\n\tLimitConnectionByIP\t5\t#max connection by ip for the account\r\n\tHome\t\t\t/home/$USER\t#overrite home of the user but if you want you can use\r\n\tIdleTimeOut\t\t3600\t#(in second) deconnect client is idle too long time\r\n\tResolveIP\t\ttrue\t#resolve ip to dns\r\n\tHideNoAccess\t\ttrue\t#Hide file/directory which user has no access\r\n\tDefaultRights\t\t0640 0750\t#Set default rights for new file and new directory\r\n\tShowLinksAsLinks\tfalse\t#show links as their destinations\r\n</Default>\r\n\r\nMY sshd_config =================================================================\r\nPort 22\r\nPort 1022\r\nProtocol 2\r\nHostKey /etc/ssh/ssh_host_rsa_key\r\nHostKey /etc/ssh/ssh_host_dsa_key\r\nHostKey /etc/ssh/ssh_host_ecdsa_key\r\nHostKey /etc/ssh/ssh_host_ed25519_key\r\nUsePrivilegeSeparation yes\r\nKeyRegenerationInterval 3600\r\nServerKeyBits 1024\r\nSyslogFacility AUTH\r\nLogLevel VERBOSE \r\nLoginGraceTime 120\r\nPermitRootLogin no\r\nStrictModes yes\r\nRSAAuthentication yes\r\nPubkeyAuthentication yes\r\nIgnoreRhosts yes\r\nRhostsRSAAuthentication no\r\nHostbasedAuthentication no\r\nPermitEmptyPasswords no\r\nChallengeResponseAuthentication no\r\nX11Forwarding yes\r\nX11DisplayOffset 10\r\nPrintMotd no\r\nPrintLastLog yes\r\nTCPKeepAlive yes\r\nAcceptEnv LANG LC_*\r\nSubsystem sftp /usr/lib/openssh/sftp-server -f AUTH -l VERBOSE\r\n\r\nTried to debug sftp-server activity without chance."},"comment":{"url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/comments/174646053","html_url":"https://github.com/mysecureshell/mysecureshell/issues/37#issuecomment-174646053","issue_url":"https://api.github.com/repos/mysecureshell/mysecureshell/issues/37","id":174646053,"user":{"login":"manusfreedom","id":2192016,"avatar_url":"https://avatars.githubusercontent.com/u/2192016?v=3","gravatar_id":"","url":"https://api.github.com/users/manusfreedom","html_url":"https://github.com/manusfreedom","followers_url":"https://api.github.com/users/manusfreedom/followers","following_url":"https://api.github.com/users/manusfreedom/following{/other_user}","gists_url":"https://api.github.com/users/manusfreedom/gists{/gist_id}","starred_url":"https://api.github.com/users/manusfreedom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/manusfreedom/subscriptions","organizations_url":"https://api.github.com/users/manusfreedom/orgs","repos_url":"https://api.github.com/users/manusfreedom/repos","events_url":"https://api.github.com/users/manusfreedom/events{/privacy}","received_events_url":"https://api.github.com/users/manusfreedom/received_events","type":"User","site_admin":false},"created_at":"2016-01-25T20:12:12Z","updated_at":"2016-01-25T20:12:12Z","body":"I deployed yesterday the last version (compiled locally) on Ubuntu 14.04 LTS too and I confirm that MySecureShell is not stable (connection drop). I rollbacked it to 1.33."}}