<div dir="ltr">In fact vsftpd always chroots some of its process for security reasons.<div><br></div><div>So it was indeed lazy loading which caused the problem, it is desactivated in the new package.</div><div><br></div><div>
I uploaded fixed packages which should land soon in the unstable repository.</div><div><br></div><div>Yann</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-02-05 Boldt, David <span dir="ltr"><<a href="mailto:dboldt@usgs.gov" target="_blank">dboldt@usgs.gov</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">success!<div><br></div><div>Many thanks.</div><div><br></div><div><br></div><div>does not look like we have been explicitly requesting a chroot:</div>
<div><div>% grep -i chroot /etc/opt/csw/vsftpd/vsftpd.conf</div>
<div># You may specify an explicit list of local users to chroot() to their home</div><div># directory. If chroot_local_user is YES, then this list becomes a list of</div><div># users to NOT chroot().</div><div>#chroot_list_enable=YES</div>
<div>#chroot_list_file=/etc/vsftpd.chroot_list</div></div><div><br></div><div>(no /etc/vsftpd.conf file)</div></div><div class="gmail_extra"><div><div class="h5"><br><br><div class="gmail_quote">On Wed, Feb 5, 2014 at 4:58 AM, Yann Rouillard <span dir="ltr"><<a href="mailto:yann@pleiades.fr.eu.org" target="_blank">yann@pleiades.fr.eu.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi again,<div><br></div><div>Could you try the following package to check if it solves your problem ?</div>
<div><a href="http://buildfarm.opencsw.org/opencsw/experimental/yann/i386/5.10/vsftpd-3.0.2,REV=2014.02.05-SunOS5.10-i386-UNCOMMITTED.pkg.gz" target="_blank">http://buildfarm.opencsw.org/opencsw/experimental/yann/i386/5.10/vsftpd-3.0.2,REV=2014.02.05-SunOS5.10-i386-UNCOMMITTED.pkg.gz</a><br>
</div><div><br></div><div>Yann</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-02-05 Yann Rouillard <span dir="ltr"><<a href="mailto:yann@pleiades.fr.eu.org" target="_blank">yann@pleiades.fr.eu.org</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>I suspect that this is rather a side effect of libraries lazy loading + chrooting: vsftpd tries to load the library only when first needed but it happens after chrooting has been performed, hence it can't find the library which is present outside of the chroot.</div>
<div><br></div><div>Can you confirm that you are indeed using vsftpd with chrooting enabled ?</div><div><br></div><div><br></div><div>Yann</div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">
2014-02-05 Ben Walton <span dir="ltr"><<a href="mailto:bwalton@opencsw.org" target="_blank">bwalton@opencsw.org</a>></span>:<div><div><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>On Wed, Feb 5, 2014 at 1:21 AM, Boldt, David <<a href="mailto:dboldt@usgs.gov" target="_blank">dboldt@usgs.gov</a>> wrote:<br>
> Running Solaris 10 on x86.<br>
><br>
> I've restarted /opt/csw/sbin/vsftpd after the upgrade.<br>
><br>
> ftp connections produce the following error on "get":<br>
><br>
> ftp> get sgrtos.flash<br>
> 200 PORT command successful. Consider using PASV.<br>
> 150 Opening BINARY mode data connection for sgrtos.flash (696120 bytes).<br>
> ld.so.1: vsftpd: fatal: libsendfile.so.1: open failed: No such file or<br>
> directory<br>
> ftp><br>
> ftp> ls<br>
> ld.so.1: vsftpd: fatal: relocation error: file /opt/csw/sbin/vsftpd: symbol<br>
> sendfilev64: referenced symbol not found<br>
> ftp> ls<br>
> 500 OOPS: priv_sock_get_cmd<br>
> No control connection for command: Broken pipe<br>
><br>
> But the libsendfile lib is there:<br>
><br>
> % ldd /opt/csw/sbin/vsftpd<br>
> libwrap.so.1 => /opt/csw/lib/i386/libwrap.so.1<br>
> libnsl.so.1 => /lib/libnsl.so.1<br>
> libpam.so.1 => /lib/libpam.so.1<br>
> libsocket.so.1 => /lib/libsocket.so.1<br>
> librt.so.1 => /lib/librt.so.1<br>
> libsendfile.so.1 => /lib/libsendfile.so.1<br>
> libssl.so.1.0.0 => /opt/csw/lib/i386/libssl.so.1.0.0<br>
> libcrypto.so.1.0.0 => /opt/csw/lib/i386/libcrypto.so.1.0.0<br>
> libc.so.1 => /lib/libc.so.1<br>
> libmp.so.2 => /lib/libmp.so.2<br>
> libmd.so.1 => /lib/libmd.so.1<br>
> libscf.so.1 => /lib/libscf.so.1<br>
> libcmd.so.1 => /lib/libcmd.so.1<br>
> libaio.so.1 => /lib/libaio.so.1<br>
> libdoor.so.1 => /lib/libdoor.so.1<br>
> libuutil.so.1 => /lib/libuutil.so.1<br>
> libgen.so.1 => /lib/libgen.so.1<br>
> libm.so.2 => /lib/libm.so.2<br>
><br>
> % ls -l /lib/libsendfile.so.1<br>
> -rwxr-xr-x 1 root bin 9552 Jan 8 2007 /lib/libsendfile.so.1<br>
><br>
> Have "[ftp] FAIL DOWNLOAD" errors in vsftpd.log, but nothing helpful.<br>
> Nothing in messages log file.<br>
><br>
> I am very perplexed and grateful for any suggestions.<br>
<br>
<br>
</div></div>Can you provide the output of dump -Lv /opt/csw/sbin/vsftpd ?<br>
<br>
It looks like there is a 32 vs 64 bit mismatch in expectations here.<br>
<br>
Thanks<br>
<span><font color="#888888">-Ben<br>
</font></span></blockquote></div></div></div><br></div>
</blockquote></div><br></div>
</blockquote></div><br><br clear="all"><div><br></div></div></div><div class="im">-- <br><div dir="ltr"><div> -- David Boldt</div><div> <<a href="mailto:dboldt@usgs.gov" target="_blank">dboldt@usgs.gov</a>></div>
<div><br></div><div><br></div><div> "No one really listens to anyone else, and if you try it for a while you'll see why."</div><div> --Mignon McLaughlin</div><div><br></div></div>
</div></div>
</blockquote></div><br></div>