OpenLDAP and file limits

Bevan C. Bennett bevan at fulcrummicro.com
Sat Jan 17 00:07:03 UTC 2004


Ok, I am having one really big problem with using FC1 as a server in one 
particular circumstance. Every week or so, LDAP hits 'Too many open 
files' and stops functioning properly. Additionally, I've discovered 
that the various LDAP clients don't then fail over to my backup LDAP 
server like they're supposed to. They don't even fail all at once, but 
things just slowly stop working one by one until everything else grinds 
to a halt.

I've seen other people with similar problems, but no useful solutions 
being offered. My old Redhat7.1 server never had this problem running 
openldap 2.0.11.

Jan 11 04:38:09 urd slapd[1452]: warning: cannot open /etc/hosts.allow: 
Too many open files
Jan 11 04:38:47 urd last message repeated 18 times
Jan 11 04:39:52 urd last message repeated 7 times
Jan 11 04:42:55 urd last message repeated 24 times
Jan 11 04:45:36 urd last message repeated 2 times
Jan 11 04:50:37 urd last message repeated 8 times
Jan 11 05:12:17 urd last message repeated 3 times
Jan 11 05:13:58 urd last message repeated 7 times
Jan 11 05:33:57 urd last message repeated 2 times
Jan 11 05:35:38 urd last message repeated 4 times
Jan 11 05:40:46 urd last message repeated 14 times
[...]
Jan 16 09:43:00 urd slapd[3021]: warning: cannot open /etc/hosts.allow: 
Too many open files
Jan 16 09:43:38 urd last message repeated 9 times
Jan 16 09:44:45 urd last message repeated 11 times
Jan 16 09:45:01 urd last message repeated 14 times

I've tried adding the following to /etc/security/limits.conf, but it 
hasn't helped:
ldap             hard    nofile          65535

It looks like I'd need to have ldap run 'ulimit -n 65535' before 
starting slapd from either within the daemon function of 
/etc/init.d/functions or some wrapper script, but I'm a little baffled 
as to why this behavior never showed up on my older system which has 
AFAIK the same per-process user limits.

Does anyone have any insight or helpful suggestions (other than putting 
together a PO for a few RHEL licenses)?





More information about the fedora-list mailing list