samba - Apr 2014 - too many open files

Hello list,

I have a problem with a samba 4.1.2 (Sernet Package) on SLES 11 SP3. 
Every few days samba (which works as a single ad controller) says 
"NT_STATUS_TOO_MANY_OPENED_FILES" and stopps working. To fix this 
Problem our customer reboots the machine.

The logfile says:

"Apr 15 02:48:37 s4ad samba[3058]: [2014/04/15 02:48:37.495691,  0] 
../source4/smbd/process_single.c:57(single_accept_conn
ection)
Apr 15 02:48:37 s4ad samba[3058]: [2014/04/15 02:48:37.495905,  0] 
../lib/util/debug.c:595(reopen_logs_internal)
Apr 15 02:48:37 s4ad samba[3058]:   Unable to open new log file 
'/var/log/samba/log.samba': Too many open files
Apr 15 02:48:37 s4ad samba[3058]:   single_accept_connection: accept: 
NT_STATUS_TOO_MANY_OPENED_FILES
Apr 15 02:48:38 s4ad samba[3058]: [2014/04/15 02:48:38.496541,  0] 
../source4/smbd/process_single.c:57(single_accept_conn
ection)"

The last two message repeats many times until reboot.

It happens just when samba tries to open a new connection to its logfile.

Any ideas? Further information needed?

Stefan

-- 
FSP Computer & Netzwerke
Inhaber:
Dipl.-Ing. Stefan Sch?fer

Ludwigstr. 1-3
63679 Schotten
------------------------------------
Tel.: +49(0)6044 989 0000
Fax:  +49(0)6044 989 0003
------------------------------------
email: info at fsproductions.de
Internet: www.fsproductions.de
------------------------------------
!tnereffid eB

Diese E-Mail k?nnte vertrauliche und/oder rechtlich gesch?tzte
Informationen enthalten. Wenn Sie nicht der richtige Adressat sind oder
diese E-Mail irrt?mlich erhalten haben, informieren Sie bitte sofort den
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die
unbefugte Weitergabe dieser Mail sind nicht gestattet.

This e-mail may contain confidential and/or privileged information. If you are
not the intended recipient (or have received this e-mail in error) please notify
the sender immediately and destroy this e-mail. Any
unauthorised copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.

On Tue, 15 Apr 2014 10:17:03 +0200, Stefan Sch?fer wrote:
> The logfile says:
> 
> "Apr 15 02:48:37 s4ad samba[3058]: [2014/04/15 02:48:37.495691,  0] 
> ../source4/smbd/process_single.c:57(single_accept_conn
> ection)
> Apr 15 02:48:37 s4ad samba[3058]: [2014/04/15 02:48:37.495905,  0] 
> ../lib/util/debug.c:595(reopen_logs_internal)
> Apr 15 02:48:37 s4ad samba[3058]:   Unable to open new log file 
> '/var/log/samba/log.samba': Too many open files
> Apr 15 02:48:37 s4ad samba[3058]:   single_accept_connection: accept: 
> NT_STATUS_TOO_MANY_OPENED_FILES
> Apr 15 02:48:38 s4ad samba[3058]: [2014/04/15 02:48:38.496541,  0] 
> ../source4/smbd/process_single.c:57(single_accept_conn
> ection)"
> 
> The last two message repeats many times until reboot.
> 
> It happens just when samba tries to open a new connection to its logfile.
> 
> Any ideas? Further information needed?
Looks like you've hit EMFILE. I'd suggest checking the list of fd's
used
by the process with "ls -l /proc/$pid/fd". That should help you
determine whether the error is due to an fd leak somewhere.

"cat /proc/$pid/limits" will also show you the "Max open
files" limits
for the process, which you may wish to raise.

Cheers, David