Linux OpenLAP 修改max open files

默认安装OpenLDAP，其max open files个数太小，设置为1024.

[root@HXnode01 limits.d]# ps -ef | grep slpad     
root     357137 351442  0 13:49 pts/2    00:00:00 grep --color=auto slpad
[root@HXnode01 limits.d]# ps -ef | grep slapd
ldap     357118      1  9 13:49 ?        00:00:01 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///
root     357144 351442  0 13:50 pts/2    00:00:00 grep --color=auto slapd
[root@HXnode01 limits.d]# cat /proc/357118/limits 
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             2062297              2062297              processes 
Max open files            1024                 4096                 files     
Max locked memory         65536                65536                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       2062297              2062297              signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                    
Max realtime priority     0                    0                    
Max realtime timeout      unlimited            unlimited            us  

我们通过以下方式来修改OpenLDAP的max open files并使其生效。

1. 找到slapd启动脚本，为/usr/lib/systemd/system/slapd.service

[root@HXnode01 limits.d]# service slapd status
Redirecting to /bin/systemctl status slapd.service
● slapd.service - OpenLDAP Server Daemon
   Loaded: loaded (/usr/lib/systemd/system/slapd.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2019-07-15 13:47:41 CST; 10s ago
     Docs: man:slapd
           man:slapd-config
           man:slapd-hdb
           man:slapd-mdb
           file:///usr/share/doc/openldap-servers/guide.html
  Process: 356183 ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS (code=exited, status=0/SUCCESS)
  Process: 356140 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)
 Main PID: 356185 (slapd)
   CGroup: /system.slice/slapd.service
           └─356185 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///

2. 修改启动脚本添加LimitNOFILE配置，LimitNOFILE=8192

[Unit]
Description=OpenLDAP Server Daemon
After=syslog.target network-online.target
Documentation=man:slapd
Documentation=man:slapd-config
Documentation=man:slapd-hdb
Documentation=man:slapd-mdb
Documentation=file:///usr/share/doc/openldap-servers/guide.html

[Service]
Type=forking
PIDFile=/var/run/openldap/slapd.pid
Environment="SLAPD_URLS=ldap:/// ldapi:///" "SLAPD_OPTIONS="
EnvironmentFile=/etc/sysconfig/slapd
ExecStartPre=/usr/libexec/openldap/check-config.sh
ExecStart=/usr/sbin/slapd -u ldap -h ${SLAPD_URLS} $SLAPD_OPTIONS
LimitNOFILE=8192

[Install]
WantedBy=multi-user.target

3. 重启ldap服务

systemctl daemon-reload
systemctl restart slapd 

5. 查看重启后ldap的max open file是否修改

[root@HXnode01 limits.d]# ps -ef | grep slapd
ldap     357709      1 23 13:51 ?        00:00:01 /usr/sbin/slapd -u ldap -h ldapi:/// ldap:///
root     357721 351442  0 13:51 pts/2    00:00:00 grep --color=auto slapd
[root@HXnode01 limits.d]# cat /proc/357709/limits 
Limit                     Soft Limit           Hard Limit           Units     
Max cpu time              unlimited            unlimited            seconds   
Max file size             unlimited            unlimited            bytes     
Max data size             unlimited            unlimited            bytes     
Max stack size            8388608              unlimited            bytes     
Max core file size        0                    unlimited            bytes     
Max resident set          unlimited            unlimited            bytes     
Max processes             2062297              2062297              processes 
Max open files            8192                 8192                 files     
Max locked memory         65536                65536                bytes     
Max address space         unlimited            unlimited            bytes     
Max file locks            unlimited            unlimited            locks     
Max pending signals       2062297              2062297              signals   
Max msgqueue size         819200               819200               bytes     
Max nice priority         0                    0                    
Max realtime priority     0                    0                    
Max realtime timeout      unlimited            unlimited            us