Policy Server restart on reboot shows different file decriptor limit

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• SITEMINDER

Issue/Introduction

 

We're starting automatically Policy Server at machine boot time and we
see after a machine reboot, the Policy Server reports only 1024 file
descriptors instead of the 65k we have defined for the user
smuser. Policy Server logs report :

  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:2646][INFO][sm-Server-01750] Maximum number of
  file descriptors available to this process is 4096
   
  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:4847][INFO][sm-Server-02010] Available file
  descriptors: 1024

We've followed indications here to configure automatic restart :

  Configure Auto Startup for RHEL 7
  https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/installing/install-a-policy-server/install-policy-server-on-unix/configure-auto-startup.html

How can we fix that ?

 

Environment

 

Policy Server 12.8SP3 on RedHat 7;

 

Resolution

 

At first glance, you can add some parameters to the systemd
configuration to solve the issue.

In /etc/systemd/system/S98sm.service files, add the LimitNOFILE=
parameter to the value you desire.

To illustrate, if I want the process to have open files limit to
10000 :

/etc/systemd/system/S98sm.service

  [Unit]
  Description=S98sm Service
  Requires=network.target

  [Service]
  Type=forking
  User=smuser
  LimitNOFILE=10000
  ExecStart=-/opt/CA/siteminder/start-all 
  ExecStop=-/opt/CA/siteminder/stop-all
  Restart=on-abort

  [Install]
  WantedBy=multi-user.target

smps.log

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4252][INFO][sm-Server-02110] Product=Policy
  Server,Platform=Linux
  3.10.0-1127.10.1.el7.x86_64,Version=12.8,Update=03.00,Label=2138,Crypto=128,UTC=1591947764,TZ=1

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4847][INFO][sm-Server-02010] Available file
  descriptors: 10000