KB-2810: Using Centrify to manage ulimits settings for AD users

Tips for finding Knowledge Articles

- Enter just a few key words related to your question or problem
- Add Key words to refine your search as necessary
- Do not use punctuation
- Search is not case sensitive
- Avoid non-descriptive filler words like "how", "the", "what", etc.
- If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
- Minimum supported Internet Explorer version is IE9

Home >

Product:

Authentication Service ,

Published:

12 April,16 at 11:44 AM

Rating:

Question:

Servers are defaulting to 1 GB for user level file descriptor (FD) limits.

How can the custom FD (file descriptor) limits for users be enforced or set without manually editing the /etc/security/limits.conf on each server?

Answer:

The limits.conf can be pushed out with a computer group policy:

1. Create a computer group policy at:

Computer Configuration -> Centrify Settings -> Common UNIX Settings -> Copy Files

a) Set limits.conf as Filename

b) Copy the custom limits.conf to \\yourDomain\SYSVOL\yourdomain\

c) Set /etc/security/ as the Destination

d) Set permissions to 0644, File UID to 0, and Owner UID to 0

2. Log onto the Linux host as root, run the command below and logout:

adgpupdate -T computer

3. Log on as an AD user in the same Linux host and the ulimit setting would be affected on a per user basis.

4. Turn off the GP setting once pushed, otherwise it will run every 90 minutes.