Issues with vsftpd Service

This document (7023666) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12

SUSE Linux Enterprise Server 15


Situation

- Local users can no longer authenticate to FTP service after the system has been joined to AD
- Listing directory "ls" that contains more than one million "too many files" files failing with errors
 
An example of the error messages are: 
 
vsftpd[30863]: pam_winbind(vsftpd:auth): request wbcLogonUser failed: WBC_ERR_AUTH_ERROR, PAM error: PAM_USER_UNKNOWN (10), NTSTATUS: NT_STATUS_NO_SUCH_USER, Error message was: No such user

or
 
vsftpd[30863]: pam_winbind(vsftpd:auth): internal module error (retval = PAM_AUTHINFO_UNAVAIL(9), user = '...')

This above issue sometimes occurs after system migration, for example from SLES 11 to SLES 12.

Resolution

To solve above issue, you need to increase the address space limit of vsftpd, this can be done by adjusting or adding the address_space_limit parameter in /etc/vsftpd.conf ; E.g.  address_space_limit=157286401 (150MB) The maximum value for this parameter is : 4294967295 (4GB)
 

Cause

The vsftpd process is getting out-of-memory resulting in failed pam module.  

Additional Information

The address_space_limit adjusts the amount of memory vsftpd can use (in bytes). This limit exists so that attackers cannot exploit any potential bugs in the server that might result in vsftpd allocating huge amounts of memory that would affect the host system negatively, e.g. causing thrashing or killing random processes due to Linux's OOM system. If the value is configured too low, vsftpd will fail with "out of memory" errors during normal operations. Oftentimes, this occurs inside of the PAM stack on systems that have many memory-intensive PAM modules enabled, as the default hardcoded value of 104857600 (100MB) might not be enough. By migrating from older to newer SLES releases, the memory requirement of those memory-intensive PAM modules might increase, requiring manual adjustment of vsftpd's memory limit.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:7023666
  • Creation Date: 24-Jan-2019
  • Modified Date:05-Jul-2021
    • SUSE Linux Enterprise Server

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback@suse.com

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

Join Our Community

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.


SUSE Customer Support Quick Reference Guide SUSE Technical Support Handbook Update Advisories
Support FAQ

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.

Go to Customer Center