Hi,
Am Thu, 13 Feb 2020 08:05:04 -0500
schrieb Mark Reynolds <mreynolds(a)redhat.com>:
On 2/13/20 5:37 AM, Julian Kippels wrote:
> Hi,
>
> I am having a small problem with a slightly larger lookup. The
> SizeLimit and LookthroughLimit are both set to 300000, but when I
> do a larger search, I still get:
Did you restart the server after setting these limits?
Yes, the server was restarted several times after setting the limits.
What is the exact ldapsearch cpmmand you ran to reproduce this error?
>
>> # search result
>> search: 2
>> result: 4 Size limit exceeded
>>
>> # numResponses: 50001
>> # numEntries: 50000
ldapsearch -x -D "cn=metauser,o=dept1" -W -H ldaps://ldaphost -b
"ou=person,o=dept1" '(modifytimestamp>=20200212094321Z)'
Can you run this search please:
ldapsearch -D "cn=directory manager" -W -b cn=config -s base
nsslapd-sizelimit
# extended LDIF
#
# LDAPv3
# base <cn=config> with scope baseObject
# filter: (objectclass=*)
# requesting: nsslapd-sizelimit
#
# config
dn: cn=config
nsslapd-sizelimit: 300000
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
Who are you authenticating as to do the search? Do you have any
resource limits set on that entry? Is "nsSizeLimit" set in their
entry?
The entry of the bind user looks like this:
cn=metauser,o=dept1
objectClass: top
objectClass: Person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: metauser
sn: metauser
uid: metauser
userPassword: xxx
Thanks,
Mark
|//|||
||
/||/
> Where else could I look for limits, that could be applicable here?
> I am using 389-ds version 1.2.2. The search in question is in a
> base that has around 55000 Entries and the filter is something like
> (modifytimestamp>$oldtimestamp). The modifytimestamp-attribute is
> indexed for presence and equality.
>
> Thanks
> Julian
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org
> To unsubscribe send an email to
> 389-users-leave(a)lists.fedoraproject.org Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List
> Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
>
--
---------------------------------------------------------
| | Julian Kippels
| | M.Sc. Informatik
| |
| | Zentrum für Informations- und Medientechnologie
| | Heinrich-Heine-Universität Düsseldorf
| | Universitätsstr. 1
| | Raum 25.41.O1.32
| | 40225 Düsseldorf / Germany
| |
| | Tel: +49-211-81-14920
| | mail: kippels(a)hhu.de
---------------------------------------------------------