Red Hat Bugzilla – Bug 135572
openssh does not set ulimits correctly unless "UseLogin yes" in sshd_config
Last modified: 2007-11-30 17:07:04 EST
From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.3) Gecko/20040930 Description of problem: you can set max number of open file descriptors for a user in /etc/security/limits.conf, but this setting is not honoured unless sshd is set to "UseLogin Yes. Version-Release number of selected component (if applicable): openssh-3.6.1p2-33.30.1 How reproducible: Always Steps to Reproduce: set number of file descriptors in limits.conf $ grep nofile /etc/security/limits.conf # - nofile - max number of open files user hard nofile 8192 user soft nofile 8192 log in over ssh as user $ ulimit -n 1024 edit /etc/ssh/sshd_config so that UseLogin yes # grep UseLogin /etc/ssh/sshd_config UseLogin yes restart ssh now log in over ssh as user $ ulimit -n 8192 ulimit for number of files is set correctly Actual Results: if sshd is configured with "UseLogin No" ulimit -n returns 1024 Expected Results: in both cases ulimit -n should return 8192 Additional info:
problem also documented in a closed bugzilla here http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=116133
Please notice, that when configuring uselogin to "yes" Xforwarding will be unactive (login does not support xauth). Shay.
*** Bug 104997 has been marked as a duplicate of this bug. ***
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2005-106.html
(In reply to comment #7) > An advisory has been issued which should help the problem > described in this bug report. This report is therefore being > closed with a resolution of ERRATA. For more information > on the solution and/or where to find the updated files, > please follow the link below. You may reopen this bug report > if the solution does not work for you. > > http://rhn.redhat.com/errata/RHSA-2005-106.html > > Question: A customer opened a support ticket with us today and says that he has EXACTLY this problem. But he is using ssh version 2 which does not contain the UseLogin variable. So, the customer's question is what is the workaround for version 2.
The limits should be set correctly if he has openssh-3.6.1p2-33.30.4 installed.