topic ulimit privileges in Operating System - Linux

ulimit privileges

Tonatiuh — Tue, 01 Nov 2005 13:25:49 GMT

Red Hat Enterprise Linux 4

I cannot set ulimit parameters ("ulimt -n 65536") with a certain user (just with root user).

In version 3 I set the following parameters in file /etc/ssh/sshd_config, to be able to set ulimit params with "myuser"

AllowUsers
UsePrivilegeSeparation no

I restared and reloaded the sshd service.

But this is not woring in version 4. I am still unable to set ulimit params with "myuser" and I cannot open ssh with root user.

Any idea about my problem?

Re: ulimit privileges

Steven E. Protter — Tue, 01 Nov 2005 13:57:13 GMT

Please post sshd_config

I run ES 4 on a large number of boxes.

I don't have to set ulimit for users or for root and they can ssh back and forth to their users hearts content.

Something else is wrong.

I'd say take out the customizations and try again.

SEP

Re: ulimit privileges

Tonatiuh — Tue, 01 Nov 2005 14:00:05 GMT

I do not understand what you mean. Oracle Appliation Server requires that oracle user canset the ulimit paramters to run.

Re: ulimit privileges

Steven E. Protter — Tue, 01 Nov 2005 16:16:16 GMT

To allow the Oracle application user to us ulimit does not require changes to sshd_config

I'm wondering if Oracle told you to do this in some document. If so I'd like to see the document.

This should be set in /etc/profile or the .profile for the user.

Try that and back out the changes to sshd_config and see if that helps.

ssh uses the same profile as telnet users.

SEP

Re: ulimit privileges

Muthukumar_5 — Wed, 02 Nov 2005 00:14:53 GMT

You have to set this with /etc/profile or $HOME/.profile file for activation during login. Best way is to use /etc/security/defualts.conf file.

hth.

Re: ulimit privileges

Van den Broeck Tijl — Wed, 02 Nov 2005 02:21:59 GMT

Settings ulimits in RHES4 can be a bit tricky. This is caused by different authentication/rights procedures in PAM. For instance, an su - user allows you to set your own ulimit, but an ssh login to that user denies you those rights.

The easiest way to set a ulimit for one specific user (and also the one recommended in Oracle documentation if I'm not mistaken) is setting it in /etc/security/limits.conf.

Add a line that looks like this:
oracle hard nproc 65000
oracle soft nproc 64000