Hi, In the following example, consumer replica v1.3 return err=11 with no entries. v1.2 return err=4, with the first 20 entries which is the size limit. Is this difference a change in the implementation or a configuration difference I am missing? The look through limit is the default 5000. The tree has more than 50,000 entries. What is even more puzzling is that the master repica running v1.3 return the same result as v1.2. Only consumer replica v1.3 return err=11 with no entry. Thank you very much. 389-Directory/1.3.5.10 B2017.115.1411, consumer replica $ ldapsearch -x -H ldaps://ldapv1.3:636 -b "ou=People,dc=example,dc=com" -s one -a always -z 1000 "(objectClass=*)" "hasSubordinates" "objectClass" # extended LDIF # # LDAPv3 # base <ou=People,dc=example,dc=com> with scope oneLevel # filter: (objectClass=*) # requesting: hasSubordinates objectClass # # search result search: 2 result: 11 Administrative limit exceeded # numResponses: 1 access log: RESULT err=11 tag=101 nentries=0 etime=0 notes=A 389-Directory/1.2.11.15 B2016.155.1910 $ ldapsearch -x -H ldaps://ldapv1.2:636 -b "ou=People,dc=example,dc=com" -s one -a always -z 1000 "(objectClass=*)" "hasSubordinates" "objectClass" # extended LDIF # # LDAPv3 # base <ou=People,dc=uwindsor,dc=ca> with scope oneLevel # filter: (objectClass=*) # requesting: hasSubordinates objectClass # …. # search result search: 2 result: 4 Size limit exceeded # numResponses: 21 # numEntries: 20 access log RESULT err=4 tag=101 nentries=20 etime=0 notes=A