Policy Server restart on reboot shows different file decriptor limit

book

Article ID: 192855

calendar_today

Updated On:

Products

CA Single Sign On Secure Proxy Server (SiteMinder) CA Single Sign On Agents (SiteMinder) CA Single Sign On Federation (SiteMinder) CA Single Sign On SOA Security Manager (SiteMinder) SITEMINDER

Issue/Introduction

 

We're starting automatically Policy Server at machine boot time and we
see after a machine reboot, the Policy Server reports only 1024 file
descriptors instead of the 65k we have defined for the user
smuser. Policy Server logs report :

  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:2646][INFO][sm-Server-01750] Maximum number of
  file descriptors available to this process is 4096
   
  [1323/140645744498496][Wed Apr 29 2020
  07:47:18][CServer.cpp:4847][INFO][sm-Server-02010] Available file
  descriptors: 1024

We've followed indications here to configure automatic restart :

  Configure Auto Startup for RHEL 7
  https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/installing/install-a-policy-server/install-policy-server-on-unix/configure-auto-startup.html

How can we fix that ?

 

Environment

 

Policy Server 12.8SP3 on RedHat 7;

 

Resolution

 

At first glance, you can add some parameters to the systemd
configuration to solve the issue.


In /etc/systemd/system/S98sm.service files, add the LimitNOFILE=
parameter to the value you desire.

To illustrate, if I want the process to have open files limit to
10000 :

/etc/systemd/system/S98sm.service

  [Unit]
  Description=S98sm Service
  Requires=network.target

  [Service]
  Type=forking
  User=smuser
  LimitNOFILE=10000
  ExecStart=-/opt/CA/siteminder/start-all 
  ExecStop=-/opt/CA/siteminder/stop-all
  Restart=on-abort

  [Install]
  WantedBy=multi-user.target

smps.log

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4252][INFO][sm-Server-02110] Product=Policy
  Server,Platform=Linux
  3.10.0-1127.10.1.el7.x86_64,Version=12.8,Update=03.00,Label=2138,Crypto=128,UTC=1591947764,TZ=1

  [16823/140052286306112][Fri Jun 12 2020
  09:42:44][CServer.cpp:4847][INFO][sm-Server-02010] Available file
  descriptors: 10000