Bug 27709 – Angabe von "-" an Stelle von "hard"/"soft" in /etc/security/limits.conf Template

Bug 27709 - Angabe von "-" an Stelle von "hard"/"soft" in /etc/security/limits.conf Template


Summary:	Angabe von "-" an Stelle von "hard"/"soft" in /etc/security/limits.conf Template

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	PAM
Version:	UCS 3.0
Hardware:	Other All

Importance:	P5 enhancement (vote)
Target Milestone:	UCS 3.0-2
Assigned To:	Philipp Hahn
QA Contact:	Jürgen Kahrs

URL:
Keywords:	interim-2

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2012-06-21 13:27 CEST by Stephan Hendl
Modified:	2012-07-20 15:25 CEST (History)
CC List:	3 users (show)

See Also:
What kind of report is it?:	---
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Troubleshooting
Max CVSS v3 score:

Flags:	hahn: Patch_Available+

Attachments
Allow - as limits type (905 bytes, patch) 2012-06-21 14:17 CEST, Philipp Hahn	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stephan Hendl 2012-06-21 13:27:41 CEST

Aufgefallen am Ticket#2012061821001607

Bei UCS-3.x Samba-Memberservern unter hoher Last müssen die ulimit-Werte sowohl für die Benutzer als auch für root über die limits-Einstellungen hochgesetzt werden. Das zugehörige Template akzeptiert jedoch nur "soft" oder "hard". Schön wäre es, wenn auch ein "-" akzeptiert werden würde. Dann könnten die Werte mit 

ucr set 'security/limits/user/root/-/nofile=16384'
ucr set 'security/limits/user/*/-/nofile=16384'

gesetzt werden.

Comment 1 Philipp Hahn

2012-06-21 14:15:03 CEST

CONFIRMED: man limits.conf
<type> -: for enforcing both soft and hard resource limits together.

# dpkg -S /etc/univention/templates/files/etc/security/limits.conf
univention-pam

Comment 2 Philipp Hahn

2012-06-21 14:17:45 CEST

Created attachment 4459 [details]
Allow - as limits type

Comment 3 Philipp Hahn

2012-06-22 20:14:58 CEST

# Vorher:
ucr set 'security/limits/user/*/-/nofile=16384'
cat /etc/security/limits.conf
# Illegal variable "security/limits/user/*/-/nofile"
# <type> must be "soft" or "hard", not "-"

# Nachher:
*                 -        nofile   16384

svn33720, univention-pam_5.0.19-1.178.201206222009

ChangeLog: svn13610
\item Hard and soft limits in \ucsFile{/etc/security/limits.conf} can now be specified together using the '-' type (\ucsBug{27709}).

Comment 4 Jürgen Kahrs

2012-07-02 08:26:31 CEST

Auf meinem UCS 3.0-1 errata 91 war genau das von Philipp angesprochene Paket installiert:

  dpkg -l univention-pam 
  ii  univention-pam 5.0.19-1.178.201206222009

Dabei verhielt sich das System genau wie nach Philipps Beschreibung erwartet:

  ucr set 'security/limits/user/*/-/nofile=16384'
  Create security/limits/user/*/-/nofile
  File: /etc/security/limits.conf

  tail -5 /etc/security/limits.conf
  # <domain>        <type>   <item>   <value>
  *                 -        nofile   16384
  @"Domain Users"   hard     nproc    1000
  
  # End of file

Comment 5 Stefan Gohmann

2012-07-20 15:25:07 CEST

UCS 3.0-2 has been released: 
  http://forum.univention.de/viewtopic.php?f=54&t=1905

If this error occurs again, please use "Clone This Bug".