LDAP / Barracuda - could not set open file limit to 8192

HCL Domino Domino Forum
1

I have a barracuda spam firewall that performs an LDAP lookup against domino to see if a recipient is valid.

I’ve checked the cn entries using Softerra LDAP Browser and they look fine. I’ve contacted barracuda support and, of course, they blame domino’s LDAP.

Any help would be greatly appreciated.

3 of our 220 users return the following error - the rest query successfully. This has been happening for months.

could not set open file limit to 8192: Operation not permitted

lookup order: fb

listening on localhost/33244

answering client connection request from 127.0.0.1/33245

received from 127.0.0.1/33245: GET rbond@surgicalspecialties.com

email address: rbond@surgicalspecialties.com

rbond@surgicalspecialties.com not found in cache

LDAP test succeeded

requesting LDAP connection to 10.10.2.11/389 for 127.0.0.1/33245

binding with ‘’ / ‘’

successfully bound to LDAP host 10.10.2.11/389

LDAP search filter for 127.0.0.1/33245: (|(mail=rbond@surgicalspecialties.com)(cn=rbond@surgicalspecialties.com)(shortname=rbond))

LDAP requested attributes for 127.0.0.1/33245: objectClass, uid, mail

expanded LDAP search base DN for 10.10.2.11/389: O=surgical

ldap_search(‘O=surgical’,‘LDAP_SCOPE_SUBTREE’,‘(|(mail=rbond@surgicalspecialties.com)(cn=rbond@surgicalspecialties.com)(shortname=rbond))’)

received 1 messages in LDAP search result

received 0 entries in LDAP search result

telling 127.0.0.1/33245: REJECTED

client released LDAP resource

received from 127.0.0.1/33245: QUIT

hanging up on client 127.0.0.1/33245

exiting on SIGTERM

2

Subject: LDAP / Barracuda - could not set open file limit to 8192

ldap_search(‘O=surgical’,‘LDAP_SCOPE_SUBTREE’,‘(|(mail=rbond@surgicalspecialties.com)(cn=rbond@surgicalspecialties.com)(shortname=rbond))’)received 1 messages in LDAP search result

received 0 entries in LDAP search result

In your Domino server’s Notes.INI set LDAPDEBUG=7 to trace the Domino LDAP server. Then try a single LDAP search like this …

ldapsearch -D yourldapdn -w yourpassword -b “O=surgical” “(|(mail=rbond@surgicalspecialties.com)(cn=rbond@surgicalspecialties.com)(shortname=rbond))”

In my output, I see that the Domino LDAP server has decided the best way to quickly narrow down the search is using an FT Search. Might be useful to rebuild your FT in case it is stale or corrupt.

3

Subject: RE: LDAP / Barracuda - could not set open file limit to 8192

My barracuda will resolve all aliases except heirarchical names.

testaccount@mydomain.com

works but

testaccount/xyz@mydomain.com

fails.

I have put a lot of time trying to figure this out but nothing seems to work.

Ideas?