OpenSSO 8: Too Many File Descriptor Used When Logging Where Activated Later

(Doc ID 1395536.1)

Last updated on MARCH 08, 2017

Applies to:

Oracle OpenSSO - Version: 8.0.2 and later   [Release: 8.0 and later ]
Information in this document applies to any platform.



With OpenSSO 8.0.2 Update 3, when OpenSSO logs status is changed from OFF to any other log level, the number of file descriptors never decrease until it reachs the maximum value fs.file-max in the sysctl.conf  (Linux).

The command losf shows that a lot of files descriptors are open on amAuthentication.error and amAuthentication.access.

When the logging level is at OFF, there is no increase of the number of file descriptors, as there is no file descriptor needed.


None of the services hosted by the machine is available. A hard reboot is required.

1. Install OpenSSO with standard configuration
2. Configure the log level to any level instead of OFF
3. generate some activity during several weeks (in our situation 80 days is enough to reach the maximum)
--> Monitor the number of file descriptor with lsof


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms