Re: UIimit issue running domino from an init.d script. [SEC=UNCLASSIFIED]

[email protected] wrote:
>
>
> Hi Jason,
>
> Had the same issue last week. We're migrating from NT/2000 to Novell SuSE
> with Domino 7.01. The ulimit values wouldn't stick so in the end I edited
> the etc/profile and included the ulimit-n 20000 in there. This works for
> ALL users on the server.
>
> This may or may not have been the correct approach to it but it did resolve
> the problem. If anyone out there knows how this could or should have been
> done in a better way, please let us know.
>
> Thanks,
>
> Paul Corrigan
>
>
>
>
>                                                                            
>              Jason.Short@treas                                             
>              ury.tas.gov.au                                                
>                                                                         To 
>              30/06/2006 10:01                                              
>              AM                                                         cc 
>                                                                            
>                                                                    Subject 
>                                         [suse-domino] UIimit issue running 
>                                         domino from an init.d script.      
>                                                                            
>                                        |-----------------------|           
>                                        | [ ] Urgent(24 hrs)    |           
>                                        | [X] Normal(24-72 hrs) |           
>                                        | [ ] Low(72+ hrs)      |           
>                                        |-----------------------|           
>                                        |-------------------|               
>                                        | [X] Unclassified  |               
>                                        | [ ] In Confidence |               
>                                        |-------------------|     Expires   
>                                                                            
>                                                                            
>                                                                            
>                                                                            
>                                                                            
>                                                                            
>
>
>
>
> G'day,
>
> I am quite new to the linux environment and running Domino on linux  and we
> are migrating all our Domino servers off Win32 to Linux. So apologies if my
> issues seem to be a basic linux admin' issue.
>
> I have come across an issue since I have loaded up our hub server with a
> couple of hundred of users whereby I get an insufficient TCP sockets
> available error. Further research on the forum and technical knowledge base
> led me to technote 1193005 regarding file limits and this is exactly my
> issue. I proceeded to set ulimits as detailed below but appear to be
> possibly having an permissions issue to setting ulimit as the notes user
> the server runs as.
>
> I have set a soft value of 20000 and a hard value of 49152 for the notes
> user in /etc/security/limits.conf.
>
> I use an init.d script (rc_domino by Daniel Nashed) that calls the
> rc_domino_script (also by Daniel Nashed) therefore I am suspecting that the
> above limits.conf settings may not be applied. I added ulimit -n 20000 to
> the rc_domino_script on a line by itself under the section Linux platform
> tuning parameters. After restarting the server and issuing an $ulimit -n
> form the java controller console it returns 1024. When I manually ran the
> script I received the error ulimit: open files: cannot modify limit:
> Operation not permitted. This is the same error if i su as the notes user
> the script runs as and try to issue ulimit -n 20000.
>
> I am suspecting that this is a permissions issue for the notes user trying
> to set the ulimit and if this is the case I would like some assistance in
> resolving the problem.
>
> Many thanks in advance for any assistance given.
>
> cheers
>
> Jason.
>
> [snip big ass disclaimer]
> --
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>   
If you're going to be working on linux, one of the core items you need
to understand is how PAM (pluggable authentication modules)  work. I'll
spare you the overview..... however, if you're going to use the
limits.conf setting, you also need to make a configuration change in
your pam.d modules (/etc/pam.d). In that directory, you'll see several
items such as "login", "su", "sudo"

depending upon how you're running domino, (script, manual) you'll need
to make change to these files:

session    required     /lib/security/pam_limits.so

and then configure your file limit paramater as specified.... (release
notes contains this information).

I'm not sure if this is exactly how RedHat does this... and to be blunt,
I don't care. <G>

Recommendation on learning how PAM works still fits. It comes up in many
places and when you don't understand it, it can really bit your butt.

Have a good weekend....

Jon Johnston
Creative Business Solutions
IBM, Microsoft, Novell/Suse and Sophos Consulting
952-544-1108
http://www.cbsol.com
Blog:http://bingo.cbsol.com

>
>