thr3ads.net - CentOS - [CentOS] LDAP server, too many open files [Oct 2009]

If this information is useful, please help other people find it:
Share via:

Jacob Bresciani

2009-Oct-22 16:09 UTC

[CentOS] LDAP server, too many open files

I've setup an LDAP server with a slave server on Centos 5.3 X86_64,  
replication works, most of the time client logins work fine but I'm  
starting to get a error I can't seem to eliminate, it's starting to  
cause login failures for users and I think it's causing other  
application failures when they try to auth against ldap.

on the client side /var/log/messages shows
Oct 22 08:53:23 client sshd[564]: nss_ldap: failed to bind to LDAP  
server ldap://ldap1: Can't contact LDAP server
Oct 22 08:53:23 client sshd[564]: nss_ldap: reconnected to LDAP server
ldap://ldap2
Oct 22 08:54:01 client ps: nss_ldap: failed to bind to LDAP server ldap://ldap1:
  Can't contact LDAP server
Oct 22 08:54:01 client ps: nss_ldap: reconnected to LDAP server ldap://ldap2
Oct 22 08:54:03 client ls: nss_ldap: failed to bind to LDAP server ldap://ldap1:
  Can't contact LDAP server
Oct 22 08:54:03 client ls: nss_ldap: reconnected to LDAP server ldap://ldap2
Oct 22 08:55:02 client ps: nss_ldap: failed to bind to LDAP server ldap://ldap1:
  Can't contact LDAP server
Oct 22 08:55:02 client ps: nss_ldap: reconnected to LDAP server ldap://ldap2

on the server side I see
  Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:25 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.allow: Too many open files
Oct 22 08:53:26 ldap1slapd[23963]: warning: cannot open /etc/ 
hosts.deny: Too many open files
...

ldap1 does nothing but ldap and I only have the x86_64 binaries  
installed.
my slapd.conf file on the server looks like

######################################################
include		/etc/openldap/schema/core.schema
include		/etc/openldap/schema/cosine.schema
include		/etc/openldap/schema/inetorgperson.schema
include		/etc/openldap/schema/nis.schema

allow bind_v2

pidfile		/var/run/openldap/slapd.pid
argsfile	/var/run/openldap/slapd.args

access to attrs=userPassword
     by self write
     by anonymous auth
     by dn.base="cn=domainadm,dc=domain,dc=local" write
     by dn.base="uid=ldapsync,ou=People,dc=domain,dc=local" read
     by * none
access to *
     by self write
     by dn.base="cn=domainadm,dc=domain,dc=local" write
     by dn.base="uid=ldapsync,ou=People,dc=domain,dc=local" read
     by * read
access to * by * read

limits dn.exact="uid=ldapsync,ou=People,dc=domain,dc=local"  
size=unlimited time=unlimited

database	bdb
suffix		"dc=domain,dc=local"
rootdn		"cn=root,dc=domain,dc=local"
rootpw          {SSHA}YnnYasdadasdasdasdassd

directory	/var/lib/ldap

# Indices to maintain for this database
index objectClass                       eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub
index uniqueMember                      eq,pres
index entryCSN				eq

loglevel sync none
logfile /var/log/ldap.log

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
######################################################

------------------------
Jacob Bresciani

Benjamin Franz

2009-Oct-22 16:23 UTC

head link

[CentOS] LDAP server, too many open files

Jacob Bresciani wrote:> I've setup an LDAP server with a slave server on Centos 5.3 X86_64,  
> replication works, most of the time client logins work fine but I'm  
> starting to get a error I can't seem to eliminate, it's starting to
> cause login failures for users and I think it's causing other  
> application failures when they try to auth against ldap.
>
> on the client side /var/log/messages shows
[...]>
> on the server side I see
>   Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
> hosts.allow: Too many open files
> Oct 22 08:53:23 ldap1slapd[23963]: warning: cannot open /etc/ 
You probably are running into the default limit for open files. Look at 
/etc/security/limits.conf and add a line reading

*                -       nofile          64000

Then restart the ldap server via the init script.

-- 
Benjamin Franz

Reasonably Related Threads

Search for more reasonably related threads

CentOS - Oct 2009 - LDAP server, too many open files

[CentOS] LDAP server, too many open files

[CentOS] LDAP server, too many open files

Reasonably Related Threads