Implementing limits

yewhiong · 02-24-2011, 10:23 AM

Hi, I would like to implement limits in my Linux server. But it just couldn't work.

I have amended /etc/security/limits.conf.

# cat /etc/security/limits.conf
@Guests - maxlogins 1

# cat /etc/pam.d/system-auth
...
session required pam_limits.so
....

In the system-auth file, do I have to amend "pam_limits.so" to "lib/security/pam_limits.so" in order to get it working?

Regards,
yewhiong

unSpawn · 02-24-2011, 12:00 PM

Quote:

Originally Posted by yewhiong

In the system-auth file, do I have to amend "pam_limits.so" to "lib/security/pam_limits.so" in order to get it working?

If you mean that you have to prefix the full path to the library name then I'd say no, not on RHEL5 / Centos 5.

Quote:

Originally Posted by yewhiong

But it just couldn't work.

"Doesn't work" is the least interesting thing to say as we can not learn anything from it. What would be interesting are any related log lines (usually: /var/log/secure) or errors. Also note /usr/share/doc/pam-*/txts/README.pam_limits shows you can use the "debug" directive to make it log more verbose.

Quote:

Originally Posted by yewhiong

@Guests - maxlogins 1

Are you sure the group name is with a capital G?

yewhiong · 02-24-2011, 09:54 PM

Hi unSpawn,

Thanks. So for RHEL5, we do not need to specify /lib/security/pam_limits.so. Just the pam_limits.so will do.

It's a spelling error in my groupname.

unSpawn · 02-25-2011, 12:27 PM

Quote:

Originally Posted by yewhiong

So for RHEL5, (..) Just the pam_limits.so will do.

Yes.

Quote:

Originally Posted by yewhiong

It's a spelling error in my groupname.

OK, but is it the error that keeps limits from functioning, that's what I would like to know.