UIimit issue running domino from an init.d script.

[J***@treasury.tas.gov.au]

G'day,

I am quite new to the linux environment and running Domino on linux and we
are migrating all our Domino servers off Win32 to Linux. So apologies if my
issues seem to be a basic linux admin' issue.

I have come across an issue since I have loaded up our hub server with a
couple of hundred of users whereby I get an insufficient TCP sockets
available error. Further research on the forum and technical knowledge base
led me to technote 1193005 regarding file limits and this is exactly my
issue. I proceeded to set ulimits as detailed below but appear to be
possibly having an permissions issue to setting ulimit as the notes user
the server runs as.

I have set a soft value of 20000 and a hard value of 49152 for the notes
user in /etc/security/limits.conf.

I use an init.d script (rc_domino by Daniel Nashed) that calls the
rc_domino_script (also by Daniel Nashed) therefore I am suspecting that the
above limits.conf settings may not be applied. I added ulimit -n 20000 to
the rc_domino_script on a line by itself under the section Linux platform
tuning parameters. After restarting the server and issuing an $ulimit -n
form the java controller console it returns 1024. When I manually ran the
script I received the error ulimit: open files: cannot modify limit:
Operation not permitted. This is the same error if i su as the notes user
the script runs as and try to issue ulimit -n 20000.

I am suspecting that this is a permissions issue for the notes user trying
to set the ulimit and if this is the case I would like some assistance in
resolving the problem.

Many thanks in advance for any assistance given.

cheers

Jason.


----------------------------------------------------------------
CONFIDENTIALITY NOTICE AND DISCLAIMER - The information in this
transmission may be confidential and/or protected by legal professional
privilege, and is intended only for the person or persons to whom it is
addressed. If you are not such a person, you are warned that any
disclosure, copying or dissemination of the information is unauthorised. If
you have received the transmission in error, please advise this Office and
delete all copies of the transmission from your records. No liability is
accepted for any unauthorised use of the information contained in this
transmission.
----------------------------------------------------------------

[p***@ssat.gov.au]

Hi Jason,

Had the same issue last week. We're migrating from NT/2000 to Novell SuSE
with Domino 7.01. The ulimit values wouldn't stick so in the end I edited
the etc/profile and included the ulimit-n 20000 in there. This works for
ALL users on the server.

This may or may not have been the correct approach to it but it did resolve
the problem. If anyone out there knows how this could or should have been
done in a better way, please let us know.

Thanks,

Paul Corrigan





***@treas
ury.tas.gov.au
To
30/06/2006 10:01
AM cc

Subject
[suse-domino] UIimit issue running
domino from an init.d script.

|-----------------------|
| [ ] Urgent(24 hrs) |
| [X] Normal(24-72 hrs) |
| [ ] Low(72+ hrs) |
|-----------------------|
|-------------------|
| [X] Unclassified |
| [ ] In Confidence |
|-------------------| Expires










G'day,

I am quite new to the linux environment and running Domino on linux and we
are migrating all our Domino servers off Win32 to Linux. So apologies if my
issues seem to be a basic linux admin' issue.

I have come across an issue since I have loaded up our hub server with a
couple of hundred of users whereby I get an insufficient TCP sockets
available error. Further research on the forum and technical knowledge base
led me to technote 1193005 regarding file limits and this is exactly my
issue. I proceeded to set ulimits as detailed below but appear to be
possibly having an permissions issue to setting ulimit as the notes user
the server runs as.

I have set a soft value of 20000 and a hard value of 49152 for the notes
user in /etc/security/limits.conf.

I use an init.d script (rc_domino by Daniel Nashed) that calls the
rc_domino_script (also by Daniel Nashed) therefore I am suspecting that the
above limits.conf settings may not be applied. I added ulimit -n 20000 to
the rc_domino_script on a line by itself under the section Linux platform
tuning parameters. After restarting the server and issuing an $ulimit -n
form the java controller console it returns 1024. When I manually ran the
script I received the error ulimit: open files: cannot modify limit:
Operation not permitted. This is the same error if i su as the notes user
the script runs as and try to issue ulimit -n 20000.

I am suspecting that this is a permissions issue for the notes user trying
to set the ulimit and if this is the case I would like some assistance in
resolving the problem.

Many thanks in advance for any assistance given.

cheers

Jason.


----------------------------------------------------------------
CONFIDENTIALITY NOTICE AND DISCLAIMER - The information in this
transmission may be confidential and/or protected by legal professional
privilege, and is intended only for the person or persons to whom it is
addressed. If you are not such a person, you are warned that any
disclosure, copying or dissemination of the information is unauthorised. If
you have received the transmission in error, please advise this Office and
delete all copies of the transmission from your records. No liability is
accepted for any unauthorised use of the information contained in this
transmission.
----------------------------------------------------------------


--
To unsubscribe, e-mail: suse-domino-***@suse.com
For additional commands, e-mail: suse-domino-***@suse.com

[jon.johnston]

Post by p***@ssat.gov.au
Hi Jason,
Had the same issue last week. We're migrating from NT/2000 to Novell SuSE
with Domino 7.01. The ulimit values wouldn't stick so in the end I edited
the etc/profile and included the ulimit-n 20000 in there. This works for
ALL users on the server.
This may or may not have been the correct approach to it but it did resolve
the problem. If anyone out there knows how this could or should have been
done in a better way, please let us know.
Thanks,
Paul Corrigan
ury.tas.gov.au
To
30/06/2006 10:01
AM cc
Subject
[suse-domino] UIimit issue running
domino from an init.d script.
|-----------------------|
| [ ] Urgent(24 hrs) |
| [X] Normal(24-72 hrs) |
| [ ] Low(72+ hrs) |
|-----------------------|
|-------------------|
| [X] Unclassified |
| [ ] In Confidence |
|-------------------| Expires
G'day,
I am quite new to the linux environment and running Domino on linux and we
are migrating all our Domino servers off Win32 to Linux. So apologies if my
issues seem to be a basic linux admin' issue.
I have come across an issue since I have loaded up our hub server with a
couple of hundred of users whereby I get an insufficient TCP sockets
available error. Further research on the forum and technical knowledge base
led me to technote 1193005 regarding file limits and this is exactly my
issue. I proceeded to set ulimits as detailed below but appear to be
possibly having an permissions issue to setting ulimit as the notes user
the server runs as.
I have set a soft value of 20000 and a hard value of 49152 for the notes
user in /etc/security/limits.conf.
I use an init.d script (rc_domino by Daniel Nashed) that calls the
rc_domino_script (also by Daniel Nashed) therefore I am suspecting that the
above limits.conf settings may not be applied. I added ulimit -n 20000 to
the rc_domino_script on a line by itself under the section Linux platform
tuning parameters. After restarting the server and issuing an $ulimit -n
form the java controller console it returns 1024. When I manually ran the
Operation not permitted. This is the same error if i su as the notes user
the script runs as and try to issue ulimit -n 20000.
I am suspecting that this is a permissions issue for the notes user trying
to set the ulimit and if this is the case I would like some assistance in
resolving the problem.
Many thanks in advance for any assistance given.
cheers
Jason.
[snip big ass disclaimer]
--

If you're going to be working on linux, one of the core items you need
to understand is how PAM (pluggable authentication modules) work. I'll
spare you the overview..... however, if you're going to use the
limits.conf setting, you also need to make a configuration change in
your pam.d modules (/etc/pam.d). In that directory, you'll see several
items such as "login", "su", "sudo"

depending upon how you're running domino, (script, manual) you'll need
to make change to these files:

session required /lib/security/pam_limits.so

and then configure your file limit paramater as specified.... (release
notes contains this information).

I'm not sure if this is exactly how RedHat does this... and to be blunt,
I don't care. <G>

Recommendation on learning how PAM works still fits. It comes up in many
places and when you don't understand it, it can really bit your butt.

Have a good weekend....

Jon Johnston
Creative Business Solutions
IBM, Microsoft, Novell/Suse and Sophos Consulting
952-544-1108
http://www.cbsol.com
Blog:http://bingo.cbsol.com