Policy Server reboot shows different Available file descriptors

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

When starting automatically Policy Server at machine boot time, the
Policy Server reports only 1024 file descriptors instead of the 65k
defined for the user smuser. Policy Server logs report :

  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:2646][INFO][sm-Server-01750]
  Maximum number of file descriptors available to this process is 4096
   
  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:4847][INFO][sm-Server-02010]
  Available file descriptors: 1024
  
Automatic restart has been configured as per documentation (1).

 

Environment

 

Policy Server 12.8SP3 on RedHat 7;

 

Resolution

 

At first glance, some parameters can be added to the systemd
configuration to solve the issue.

In /etc/systemd/system/S98sm.service files, add the LimitNOFILE=
parameter to the value you desire.

To illustrate, if I want the process to have open files limit to
10000 :

/etc/systemd/system/S98sm.service

  [Unit]
  Description=S98sm Service
  Requires=network.target

  [Service]
  Type=forking
  User=smuser
  LimitNOFILE=10000
  ExecStart=-/opt/CA/siteminder/start-all 
  ExecStop=-/opt/CA/siteminder/stop-all
  Restart=on-abort

  [Install]
  WantedBy=multi-user.target

smps.log

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4252][INFO][sm-Server-02110] Product=Policy Server,Platform=Linux
  3.10.0-1127.10.1.el7.x86_64,Version=12.8,Update=03.00,Label=2138,Crypto=128,UTC=1591947764,TZ=1

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4847][INFO][sm-Server-02010]
  Available file descriptors: 10000