Topic: Peut on imbriquer une directive Group dans une directive VirtualHost ?
Bonjour,
MySecureShell Version : 1.31
OS Debian 6.0.8
OpenSSH_5.5p1 Debian-6+squeeze4, OpenSSL 0.9.8o 01 Jun 2010
Avec la configuration qui suit, la commande ssh vers le host 192.168.55.251 port 22 :
ssh -p22 -C userg@192.168.55.251 rdiff-backup --version
shell mondobkp.sh
-jmsh: rdiff-backup --version: command not found
obtient le shell "/gv0/sh/pub/mondobkp.sh" au lieu du shell /gv0/sh/pub/rdiffbkp.sh.
Est ce normal ?
Le user "userg" fait parti des 2 groupes : rdiffbkp et mondobkp.
#Rules only for specific group in VirtualHost *:22
<VirtualHost *:22>
<Group rdiffbkp>
GlobalUpload 500k #total speed download for all clients (0 for unlimited)
Download 5k #limit speed download for each connection
Upload 100k #unlimit speed upload for each connection
Shell /gv0/sh/pub/rdiffbkp.sh #give a shell access to TRUSTED users
ApplyFileSpec HideFilesDir,HideHiddenFiles # remplace HideFiles
Home /home/$USER #overrite home of the user
StayAtHome true #limit client to his home
VirtualChroot true #fake a chroot to the home account
HideNoAccess true #Hide file/directory which user has no access
IgnoreHidden true #treat all hidden files as if they don't exist
</Group>
</VirtualHost>
#Rules only for specific group in VirtualHost *:722
<VirtualHost *:722>
<Group mondobkp>
GlobalDownload 0 #total speed download for all clients
GlobalUpload 0 #total speed download for all clients (0 for unlimited)
Download 0 #unlimit speed download for each connection
Upload 0 #unlimit speed upload for each connection
Shell /gv0/sh/pub/mondobkp.sh #give a shell access to TRUSTED users
ApplyFileSpec ShowAllMondo
Home /home/${USER}/mondo #overrite home of the user
StayAtHome true #limit client to his home
VirtualChroot true #fake a chroot to the home account
HideNoAccess true #Hide file/directory which user has no access
IgnoreHidden false #treat all hidden files as if they don't exist
IdleTimeOut 0 #deconnect client is idle too long time
</Group>
</VirtualHost>
Des tests complémentaires semblent montrer que les directives VirtualHost sont ignorés dans ce cas, et que seules les directives group imbriquées sont considérées.
En l'absence de directives group à l'intérieur des directives VirtualHost, les directives VirtualHost et la totalité de leur contenu sont ignorées.
Merci d'avance