Security Software

Hello !

sun directory server 5.2 patch 6
linux redhat 3.7

My directory server was out yesterday.
Here is the error message :

[10/Dec/2008:17:35:24 +0100] - ERROR<12289> - Connection - conn=-1 op=-1 msgId=-1 - PR_Accept() failed, error -5971 (Process open FD table is full.)
[10/Dec/2008:17:35:24 +0100] - ERROR<12289> - Connection - conn=-1 op=-1 msgId=-1 - PR_Accept() failed, error -5971 (Process open FD table is full.)
[10/Dec/2008:17:35:24 +0100] - ERROR<12289> - Connection - conn=-1 op=-1 msgId=-1 - PR_Accept() failed, error -5971 (Process open FD table is full.)



Parameter from the dse.ldif :
nsslapd-maxdescriptors: 1024

System parameter :
ulimit -a | grep open
open files (-n) 65536

******************
Common error rfering to sun's documentation :
12289: PR_Accept() failed error variable (variable)
Cause:

The problem depends on the variable and is based on the Netscape Portable Runtime (NSPR) error layer.
Solution:
If you determine that the cause of the problem is that the TCP port to which you are attempting to bind is already in use, consider the following actions.
* Restart the server, using a different port.
* Stop the application bound to that port and restart the server.
******************


But it doesn't explain my problem because the port (389) is not in use. The problem is due to the number of open file...

What is the best practice on this parameter ? (sun directory + operating system)
The process slapd runs using another user as root

Thanks