Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #264277

[SOLVED] Re: dovecot auth failure due to panic in libpam_fscrypt

From Max Nikulin <manikulin@gmail.com>
Newsgroups linux.debian.user
Subject [SOLVED] Re: dovecot auth failure due to panic in libpam_fscrypt
Date 2023-12-05 09:30 +0100
Message-ID <HHyYy-ble3-5@gated-at.bofh.it> (permalink)
References <HHkiS-b7tN-5@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On 04/12/2023 23:41, Max Nikulin wrote:
> Installing of libpam-fscrypt caused authentication failures:
> 
> dovecot[72165]: auth-worker: Error: fatal error: failed to reserve page 
> summary memory
> dovecot[72165]: auth-worker: Error:
> dovecot[72165]: auth-worker: Error: runtime stack:
> dovecot[72165]: auth-worker: Error: runtime.throw({0x7f552c418194?, 
> 0x7f552c1feb10?})
> dovecot[72165]: auth-worker: Error:         runtime/panic.go:1047 +0x5f 
> fp=0x7f552c1feac0 sp=0x7f552c1fea90 pc=0x7f552c28a53f

It happens even for an invalid user or password

curl -v 'imap://bad:bad@localhost/'

 From strace of a dovecot auth process:

4468  14:27:49 mmap(NULL, 536870912, PROT_NONE, 
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
4468  14:27:49 <... mmap resumed>)      = -1 ENOMEM (Cannot allocate memory)

prlimit --pid 4608
RESOURCE   DESCRIPTION                             SOFT      HARD UNITS
AS         address space limit                268435456 268435456 bytes

/etc/dovecot/conf.d/99-auth-worker-fscrypt-vsz.conf
file with the following content prevents the issue with Go runtime,
however fscrypt developers may document amount of memory required for 
the plugin:

service auth-worker {
   # Go language runtime in pam_fscrypt.so requires enough memory
   # default is 256M
   #vsz_limit = $default_vsz_limit
   # still crash, but later
   # vsz_limit = 800M
   vsz_limit = 1024M
}

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

dovecot auth failure due to panic in libpam_fscrypt Max Nikulin <manikulin@gmail.com> - 2023-12-04 17:50 +0100
  [SOLVED] Re: dovecot auth failure due to panic in libpam_fscrypt Max Nikulin <manikulin@gmail.com> - 2023-12-05 09:30 +0100

csiph-web