https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c1 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |vuntz@suse.com --- Comment #1 from Vincent Untz 2012-01-05 14:41:45 UTC --- Proper upstream fix: http://cgit.freedesktop.org/dbus/dbus/commit/?id=66a09fa7c3c8e4232b4225c49d0... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c4 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |drichard@largo.com --- Comment #4 from Vincent Untz 2012-01-09 09:39:45 UTC --- David: can you try the packages in home:vuntz:11.4-testing? I included the upstream patch there. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c7 David Richards changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|drichard@largo.com | --- Comment #7 from David Richards 2012-01-10 17:56:55 UTC --- @Vincent: This patch did not fully resolve this issue and we got dbus failures at 1024 open files. It seems like this patch allows the process to use the handles if they are available, but possibly the user is not being granted the right ulimit? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c11 --- Comment #11 from David Richards 2012-01-17 15:20:35 UTC --- @Vincent: I have confirmed for sure that this new code is still halting at 1024 open files. system-local.conf is set to: <!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> <busconfig> <limit name="max_connections_per_user">5000</limit> <limit name="max_completed_connections">2000000</limit> <limit name="max_incomplete_connections">60000</limit> <limit name="max_replies_per_connection">100000</limit> <limit name="max_pending_service_starts">30000</limit> <limit name="max_match_rules_per_connection">100000</limit> <limit name="max_incoming_bytes">2000000000</limit> <limit name="max_incoming_unix_fds">500000000</limit> </busconfig> I know for sure this file is being read and used because prior to this issue, I had to do some tuning to get past 80 users. As soon as the dbus process hits 1024 it stops working and no additional users can log into the server. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c13 --- Comment #13 from David Richards 2012-01-18 21:05:52 UTC --- @Vincent: End of the day update, we're still broken. I made the change first to /etc/sysconfig/ulimit and we rebooted. I changed the SOFTFD limit per process to 8192 from the default of 1024 and it failed. It sure seems like this change alone should have given the user the rights to at least 8192 before failure. I just made the following change to /etc/rc.d/dbus: echo -n "Starting D-Bus daemon" # Added to try and increase limit: ulimit -n 65535 start_daemon -f $DBUS_DAEMON_BIN $DBUS_DAEMON_PARAMETER rc_status -v I don't think however this will work. The script is running as root and then runs start_daemon which fires dbus off as another user. I believe this ulimit is only set for the current user (root) and not passed to children. But I could be wrong and we'll find out tomorrow after reboot. That first change to SOFTFD in my mind should absolutely have worked. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c14 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |security-team@suse.de --- Comment #14 from Vincent Untz 2012-01-19 13:33:53 UTC --- I'm a bit lost here: things should work now :/ Security team: I don't know who'd be the right person to ask but one of you might know... Do you know if anything changed in 11.4 wrt ulimit? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c17 David Richards changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |RESOLVED InfoProvider|security-team@suse.de | Resolution| |FIXED --- Comment #17 from David Richards 2012-01-24 17:07:56 UTC --- @All: After a lengthy process I was able to get this issue resolved. I am requesting the following changes be made to OpenSuse 11.4. Very possibly the second issue will need to be done to OS 12.x too. + Add Vincents patched dbus to the update channel. This allows for additional file handles at the daemon level. + The following two lines should be added to /etc/security/limits.conf. Otherwise the daemon is prohibited by PAM to allocate additional file handles: messagebus soft nofile 8192 messagebus hard nofile 65535 While this won't happen in a single user computer, it happens very easily on a multi-user server. OpenSuse denies logins right around 95 users without this change. Thanks Vincent! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c19 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #19 from Vincent Untz 2012-01-24 18:36:02 UTC --- Maintenance: we'll need a 11.4 update for dbus, and possibly for pam. The dbus change is: https://build.opensuse.org/package/rdiff?opackage=dbus-1&oproject=openSUSE%3A11.4%3AUpdate&package=dbus-1&project=home%3Avuntz%3A11.4-testing&rev=2 The pam change needs approval from a pam maintainer, and is described in comment 17. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c21 --- Comment #21 from Thorsten Kukuk 2012-01-25 09:14:17 UTC --- (In reply to comment #20)

I don't know if this is a valid statement, but it almost seems like when you make the change /etc/sysconfig/ulimit via Yast2 that it should create corresponding entries in limits.conf. Having two areas with similar settings is confusing. You aren't always sure which one is really doing the blocking.

No, /etc/sysconfig/ulimit are system wide limits, /etc/security/limits.conf is per user. That's a big difference. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c23 --- Comment #23 from Vincent Untz 2012-01-25 09:34:39 UTC --- (In reply to comment #21)

(In reply to comment #20)

...

I don't know if this is a valid statement, but it almost seems like when you make the change /etc/sysconfig/ulimit via Yast2 that it should create corresponding entries in limits.conf. Having two areas with similar settings is confusing. You aren't always sure which one is really doing the blocking.

No, /etc/sysconfig/ulimit are system wide limits, /etc/security/limits.conf is per user. That's a big difference.

My understanding of David's issue is that the system-wide setting is ignored, even though there is no per user configuration in /etc/security/limits.conf. Is this expected? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c26 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:45081:low |maint:running:45081:low | |maint:released:sle11-sp1:45 | |082 --- Comment #26 from Swamp Workflow Management 2012-01-27 19:13:09 UTC --- Update released for: dbus-1, dbus-1-32bit, dbus-1-debuginfo, dbus-1-debuginfo-32bit, dbus-1-debuginfo-64bit, dbus-1-debuginfo-x86, dbus-1-debugsource, dbus-1-devel, dbus-1-devel-doc, dbus-1-x11, dbus-1-x11-debuginfo, dbus-1-x11-debugsource, dbus-1-x86 Products: SLE-DEBUGINFO 11-SP1 (i386, ia64, ppc64, s390x, x86_64) SLE-DESKTOP 11-SP1 (i386, x86_64) SLE-SDK 11-SP1 (i386, ia64, ppc64, s390x, x86_64) SLE-SERVER 11-SP1 (i386, ia64, ppc64, s390x, x86_64) SLE-SERVER 11-SP1-TERADATA (x86_64) SLES4VMWARE 11-SP1 (i386, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c28 Vincent Untz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |drichard@largo.com --- Comment #28 from Vincent Untz 2012-01-31 08:16:33 UTC --- David: does the latest package work by default, with the config file in /etc/security/limits.d? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c30 --- Comment #30 from David Richards 2012-01-31 12:53:03 UTC --- @All: The patch by itself nor adding the unlmit -n line in the init script worked, we tried on per day and the server failed at 1024. That /proc/PID/limits file is wonderful, wish I had known about that previously. I was just wc'ing in the fd directory and watching it get to 1024. We were only able to get past this threshold by adding the line mentioned in comment 17..which I understand is not a good long term fix. I have not yet installed the new test package because things are working and the users were not being very friendly about the fact that their sessions were errant prior to this change. Is there a way to write a little C app that just loops and opens more connections to dbus so that it could be tested prior to me just putting it into a production environment? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c32 David Richards changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED Resolution|NORESPONSE | --- Comment #32 from David Richards 2012-03-13 16:16:07 UTC --- This bug should not have been closed. As I indicated in the last comment, this patch worked and needs to be merged into OS 11.4 as part of the update channel. I see that it seems to have been merged into SLES/SLED but we need is in OpenSuse too. Otherwise the next update I get will clobber this critical fix. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c33 --- Comment #33 from Benjamin Brunner 2012-07-24 16:51:13 CEST --- The dbus-1 update for 11.4 is released. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=739743 https://bugzilla.novell.com/show_bug.cgi?id=739743#c35 Timo Hoenig changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |CLOSED Resolution| |FIXED --- Comment #35 from Timo Hoenig 2013-07-24 11:50:09 UTC --- Closing as fixed as per last comment. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.