Silvia Tormo
2015-Mar-26 14:52 UTC
Error: open() failed with file /var/vmail/... Too many open files
Hello guys we have Dovecot 2.0.19 and we are getting those errors opening
files of dovecot Too many open files, we?ve tried to increase limits in
/etc/security/limits
Wih ulimits ?a
core file size (blocks, -c) 0
data seg size (kbytes, -d) unlimited
scheduling priority (-e) 0
file size (blocks, -f) unlimited
pending signals (-i) 63735
max locked memory (kbytes, -l) 64
max memory size (kbytes, -m) unlimited
open files (-n) 102400
pipe size (512 bytes, -p) 8
POSIX message queues (bytes, -q) 819200
real-time priority (-r) 0
stack size (kbytes, -s) 8192
cpu time (seconds, -t) unlimited
max user processes (-u) 63735
virtual memory (kbytes, -v) unlimited
file locks (-x) unlimited
But if i make cat/proc/dovecotpid/limits
Limit Soft Limit Hard Limit Units
Max cpu time unlimited unlimited seconds
Max file size unlimited unlimited bytes
Max data size unlimited unlimited bytes
Max stack size 8388608 unlimited bytes
Max core file size 0 unlimited bytes
Max resident set unlimited unlimited bytes
Max processes 63735 63735
processes
Max open files 1024 4096 files
Max locked memory 65536 65536 bytes
Max address space unlimited unlimited bytes
Max file locks unlimited unlimited locks
Max pending signals 63735 63735 signals
Max msgqueue size 819200 819200 bytes
Max nice priority 0 0
Max realtime priority 0 0
Max realtime timeout unlimited unlimited us
I am still getting 1024 limit
The only warning that we get is
doveconf: Warning: service auth { client_limit=4096 } is lower than required
under max. load (9516)
doveconf: Warning: service anvil { client_limit=1000 } is lower than
required under max. load (4299)
I?ve tried all i have found in internet, but there is no more info, and is
like i?ve increased system limits but not dovecot limits.
Thankyou
This is our CONF
# 2.0.19: /etc/dovecot/dovecot.conf
# OS: Linux 3.8.0-44-generic x86_64 Ubuntu 12.04.5 LTS ext4
auth_anonymous_username = anonymous
auth_cache_negative_ttl = 1 hours
auth_cache_size = 0
auth_cache_ttl = 1 hours
auth_debug = no
auth_debug_passwords = no
auth_default_realm auth_failure_delay = 2 secs
auth_first_valid_uid = 500
auth_gssapi_hostname = VM8-ATISA.atisa.es
auth_krb5_keytab = /etc/dovecot/dovecot.keytab
auth_last_valid_uid = 0
auth_master_user_separator auth_mechanisms = plain login gssapi
auth_realms auth_socket_path = auth-userdb
auth_ssl_require_client_cert = no
auth_ssl_username_from_cert = no
auth_use_winbind = no
auth_username_chars
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
auth_username_format auth_username_translation auth_verbose = no
auth_verbose_passwords = no
auth_winbind_helper_path = /usr/bin/ntlm_auth
auth_worker_max_count = 30
base_dir = /var/run/dovecot
config_cache_size = 1 M
debug_log_path default_client_limit = 1000
default_idle_kill = 60
default_internal_user = dovecot
default_login_user = dovenull
default_process_limit = 100
default_vsz_limit = 256 M
deliver_log_format = msgid=%m: %$
dict_db_config director_doveadm_port = 0
director_mail_servers director_servers director_user_expire = 15 mins
disable_plaintext_auth = no
dotlock_use_excl = yes
doveadm_allowed_commands doveadm_password doveadm_proxy_port = 0
doveadm_socket_path = doveadm-server
doveadm_worker_count = 0
first_valid_gid = 112
first_valid_uid = 107
hostname imap_capability imap_client_workarounds imap_id_log imap_id_send
imap_idle_notify_interval = 2 mins
imap_logout_format = bytes=%i/%o
imap_max_line_length = 64 k
import_environment = TZ
info_log_path instance_name = dovecot
last_valid_gid = 0
last_valid_uid = 0
lda_mailbox_autocreate = no
lda_mailbox_autosubscribe = no
lda_original_recipient_header libexec_dir = /usr/lib/dovecot
listen = *, ::
lmtp_proxy = no
lmtp_save_to_detail_mailbox = no
lock_method = fcntl
log_path = syslog
log_timestamp = "%Y-%m-%d %H:%M:%S "
login_access_sockets login_greeting = Dovecot ready.
login_log_format = %$: %s
login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c
login_trusted_networks mail_access_groups mail_attachment_dir mail_attachment_fs
= sis posix
mail_attachment_hash = %{sha1}
mail_attachment_min_size = 128 k
mail_cache_fields = flags
mail_cache_min_mail_count = 0
mail_chroot mail_debug = no
mail_fsync = optimized
mail_full_filesystem_access = no
mail_gid = 112
mail_home = /var/vmail/sieve/%d/%u
mail_location = maildir:/var/vmail/%$
mail_log_prefix = "%s(%u): "
mail_max_keyword_length = 50
mail_max_lock_timeout = 0
mail_max_userip_connections = 10
mail_never_cache_fields = imap.envelope
mail_nfs_index = no
mail_nfs_storage = no
mail_plugin_dir = /usr/lib/dovecot/modules
mail_plugins mail_privileged_group mail_save_crlf = no
mail_temp_dir = /tmp
mail_uid = 107
mailbox_idle_check_interval = 30 secs
mailbox_list_index_disable = no
maildir_copy_with_hardlinks = yes
maildir_stat_dirs = no
maildir_very_dirty_syncs = no
managesieve_client_workarounds managesieve_implementation_string = Dovecot
Pigeonhole
managesieve_logout_format = bytes=%i/%o
managesieve_max_compile_errors = 5
managesieve_max_line_length = 65536
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags
copy include variables body e
notify environment mailbox date ihave
master_user_separator mbox_dirty_syncs = yes
mbox_dotlock_change_timeout = 2 mins
mbox_lazy_writes = yes
mbox_lock_timeout = 5 mins
mbox_min_index_size = 0
mbox_read_locks = fcntl
mbox_very_dirty_syncs = no
mbox_write_locks = dotlock fcntl
mdbox_preallocate_space = no
mdbox_rotate_interval = 0
mdbox_rotate_size = 2 M
mmap_disable = no
passdb {
args = /etc/dovecot/dovecot-ldap.conf
deny = no
driver = ldap
master = no
pass = no
}
plugin {
autocreate = Trash
autocreate2 = Spam
autocreate3 = Sent
autocreate4 = Drafts
autosubscribe = Trash
autosubscribe2 = Spam
autosubscribe3 = Sent
autosubscribe4 = Drafts
quota = maildir:User quota
quota_rule = *:storage=0
sieve = /var/vmail/sieve/%d/%u/sieve-script
sieve_dir = /var/vmail/sieve/%d/%u
sieve_global_path = /var/vmail/sieve/default.sieve
sieve_storage = /var/vmail/sieve/%d/%u
}
pop3_client_workarounds pop3_enable_last = no
pop3_fast_size_lookups = no
pop3_lock_session = no
pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
pop3_no_flag_updates = no
pop3_reuse_xuidl = no
pop3_save_uidl = no
pop3_uidl_format = %08Xu%08Xv
postmaster_address protocols = pop3 imap sieve
quota_full_tempfail = no
recipient_delimiter = +
rejection_reason = Your message to <%t> was automatically rejected:%n%r
rejection_subject = Rejected: %s
sendmail_path = /usr/sbin/sendmail
service anvil {
chroot = empty
client_limit = 0
drop_priv_before_exec = no
executable = anvil
extra_groups group idle_kill = 4294967295 secs
privileged_group process_limit = 1
process_min_avail = 1
protocol service_count = 0
type = anvil
unix_listener anvil-auth-penalty {
group mode = 0600
user }
unix_listener anvil {
group mode = 0600
user }
user = $default_internal_user
vsz_limit = 18446744073709551615 B
}
service auth-worker {
chroot client_limit = 1
drop_priv_before_exec = no
executable = auth -w
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 1
type unix_listener auth-worker {
group mode = 0600
user = $default_internal_user
}
user vsz_limit = 18446744073709551615 B
}
service auth {
chroot client_limit = 4096
drop_priv_before_exec = no
executable = /usr/lib/dovecot/auth
extra_groups group idle_kill = 0
privileged_group process_limit = 1
process_min_avail = 0
protocol service_count = 0
type unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user = postfix
}
unix_listener auth-client {
group mode = 0600
user }
unix_listener auth-login {
group mode = 0600
user = $default_internal_user
}
unix_listener auth-master {
group = ebox
mode = 0600
user = ebox
}
unix_listener auth-userdb {
group mode = 0600
user }
unix_listener login/login {
group mode = 0666
user }
user = dovecot
vsz_limit = 18446744073709551615 B
}
service config {
chroot client_limit = 0
drop_priv_before_exec = no
executable = config
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 0
type = config
unix_listener config {
group mode = 0600
user }
user vsz_limit = 18446744073709551615 B
}
service dict {
chroot client_limit = 1
drop_priv_before_exec = no
executable = dict
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 0
type unix_listener dict {
group mode = 0600
user }
user = $default_internal_user
vsz_limit = 18446744073709551615 B
}
service director {
chroot client_limit = 0
drop_priv_before_exec = no
executable = director
extra_groups fifo_listener login/proxy-notify {
group mode = 00
user }
group idle_kill = 4294967295 secs
privileged_group process_limit = 1
process_min_avail = 0
protocol service_count = 0
type unix_listener director-admin {
group mode = 0600
user }
unix_listener login/director {
group mode = 00
user }
user = $default_internal_user
vsz_limit = 18446744073709551615 B
}
service dns_client {
chroot client_limit = 1
drop_priv_before_exec = no
executable = dns-client
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 0
type unix_listener dns-client {
group mode = 0666
user }
unix_listener login/dns-client {
group mode = 0666
user }
user = $default_internal_user
vsz_limit = 18446744073709551615 B
}
service doveadm {
chroot client_limit = 1
drop_priv_before_exec = no
executable = doveadm-server
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 1
type unix_listener doveadm-server {
group mode = 0600
user }
user vsz_limit = 18446744073709551615 B
}
service imap-login {
chroot = login
client_limit = 1024
drop_priv_before_exec = no
executable = imap-login
extra_groups group idle_kill = 0
inet_listener imap {
address = *
port = 143
ssl = no
}
inet_listener imaps {
address = *
port = 993
ssl = yes
}
privileged_group process_limit = 4096
process_min_avail = 0
protocol = imap
service_count = 0
type = login
user = $default_login_user
vsz_limit = 18446744073709551615 B
}
service imap {
chroot client_limit = 1024
drop_priv_before_exec = no
executable = imap
extra_groups group idle_kill = 0
privileged_group process_limit = 4096
process_min_avail = 0
protocol = imap
service_count = 0
type unix_listener login/imap {
group mode = 0666
user }
user vsz_limit = 18446744073709551615 B
}
service ipc {
chroot = empty
client_limit = 0
drop_priv_before_exec = no
executable = ipc
extra_groups group idle_kill = 0
privileged_group process_limit = 1
process_min_avail = 0
protocol service_count = 0
type unix_listener ipc {
group mode = 0600
user }
unix_listener login/ipc-proxy {
group mode = 0600
user = $default_login_user
}
user = $default_internal_user
vsz_limit = 18446744073709551615 B
}
service lmtp {
chroot client_limit = 1
drop_priv_before_exec = no
executable = lmtp
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol = lmtp
service_count = 0
type unix_listener lmtp {
group mode = 0666
user }
user vsz_limit = 18446744073709551615 B
service log {
chroot client_limit = 0
drop_priv_before_exec = no
executable = log
extra_groups group idle_kill = 0
privileged_group process_limit = 1
process_min_avail = 0
protocol service_count = 0
type = log
user vsz_limit = 18446744073709551615 B
}
service managesieve-login {
chroot = login
client_limit = 0
drop_priv_before_exec = no
executable = managesieve-login
extra_groups group idle_kill = 0
inet_listener sieve {
address port = 4190
ssl = no
}
privileged_group process_limit = 0
process_min_avail = 0
protocol = sieve
service_count = 1
type = login
user = $default_login_user
vsz_limit = 18446744073709551615 B
}
service managesieve {
chroot client_limit = 1
drop_priv_before_exec = no
executable = managesieve
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol = sieve
service_count = 1
type unix_listener login/sieve {
group mode = 0666
user }
user vsz_limit = 18446744073709551615 B
}
service pop3-login {
chroot = login
client_limit = 0
drop_priv_before_exec = no
executable = pop3-login
extra_groups group idle_kill = 0
inet_listener pop3 {
address port = 110
ssl = no
}
inet_listener pop3s {
address port = 995
ssl = yes
}
privileged_group process_limit = 0
process_min_avail = 0
protocol = pop3
service_count = 1
type = login
user = $default_login_user
vsz_limit = 18446744073709551615 B
}
service pop3 {
chroot client_limit = 1
drop_priv_before_exec = no
executable = pop3
extra_groups group idle_kill = 0
privileged_group process_limit = 1024
process_min_avail = 0
protocol = pop3
service_count = 1
type unix_listener login/pop3 {
group mode = 0666
user }
user vsz_limit = 18446744073709551615 B
}
service ssl-params {
chroot client_limit = 0
drop_priv_before_exec = no
executable = ssl-params
extra_groups group idle_kill = 0
privileged_group process_limit = 0
process_min_avail = 0
protocol service_count = 0
type = startup
unix_listener login/ssl-params {
group mode = 0666
user }
user vsz_limit = 18446744073709551615 B
}
shutdown_clients = yes
ssl = yes
ssl_ca ssl_cert = </etc/dovecot/ssl/mx_atisa_es.crt
ssl_cert_username_field = commonName
ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL
ssl_client_cert ssl_client_key ssl_key = </etc/dovecot/ssl/mx_atisa_es.key
ssl_key_password ssl_parameters_regenerate = 168
ssl_protocols = !SSLv2
ssl_verify_client_cert = no
submission_host syslog_facility = mail
userdb {
args = /etc/dovecot/dovecot-ldap.conf
driver = ldap
}
valid_chroot_dirs verbose_proctitle = no
verbose_ssl = no
version_ignore = no
protocol imap {
mail_plugins = quota imap_quota autocreate
}
protocol pop3 {
mail_plugins = quota
}
protocol lda {
auth_socket_path = /var/run/dovecot/auth-master
mail_plugins = sieve quota
postmaster_address = postmaster
}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5802 bytes
Desc: not available
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20150326/f00bc298/attachment-0001.p7s>
Timo Sirainen
2015-Mar-27 21:03 UTC
Error: open() failed with file /var/vmail/... Too many open files
On 26 Mar 2015, at 16:52, Silvia Tormo <silvia.tormo at addapta.com> wrote:> > Hello guys we have Dovecot 2.0.19 and we are getting those errors opening > files of dovecot Too many open files, we?ve tried to increase limits in > /etc/security/limits/etc/security/ settings don't affect Dovecot (or any other server program). You need to put the ulimit commands somewhere in the init script. Or perhaps adding the ulimit command to /etc/default/dovecot would work. I don't know what's the correct Ubuntu way to do it.