SFTP

SFTP does not work for primary domain user with chrooted shell on Ubuntu 12.04

Article ID: 114756

Created On: Sep 12, 2012

Last Review: Aug 12, 2014

Views:

APPLIES TO:

• Parallels Plesk 11.x for Linux
• Parallels Plesk 10.x for Linux

Symptoms

In Parallels Plesk Panel (PP), users cannot log in via SFTP if their shell access is set to chrooted shell. The utility sftp-server reports the following error:

$ usr/lib/openssh/sftp-server
No user found for uid 10000

Cause

The libnss libraries are not copied to the chrooted environment because PP looks for them in /lib or /lib64, but on Ubuntu 12.04, they are in /lib/i386-linux-gnu and /lib/x86_64-linux-gnu, respectively.

Without libnss_compat.so.2 in the chrooted environment, no UID can be resolved to the actual username causing sftp-server to report the above error.

Resolution

The issue will be fixed in a future update for which a new Knowledgebase article will be created. You may subscribe to new articles on Parallels Plesk Panel products if you wish to receive notifications about their creation.

Workaround

Copy the libnss_compat.so.2 library and its dependency libnsl.so.1 to the lib directory of the chrooted environment:

For a 64-bit environment:

# cp /lib/x86_64-linux-gnu/libnss_compat.so.2 /var/www/vhosts/chroot/lib/
# cp /lib/x86_64-linux-gnu/libnsl.so.1 /var/www/vhosts/chroot/lib/

For a 32-bit environment:

# cp /lib/i386-linux-gnu/libnss_compat.so.2 /var/www/vhosts/chroot/lib/
# cp /lib/i386-linux-gnu/libnsl.so.1 /var/www/vhosts/chroot/lib/