Hi,

Am Thu, 13 Feb 2020 08:05:04 -0500
schrieb Mark Reynolds <mreyno...@redhat.com>:

> On 2/13/20 5:37 AM, Julian Kippels wrote:
> > Hi,
> >
> > I am having a small problem with a slightly larger lookup. The
> > SizeLimit and LookthroughLimit are both set to 300000, but when I
> > do a larger search, I still get:  
> 
> Did you restart the server after setting these limits?

Yes, the server was restarted several times after setting the limits.

> 
> What is the exact ldapsearch cpmmand you ran to reproduce this error?
> 
> >  
> >> # search result
> >> search: 2
> >> result: 4 Size limit exceeded
> >>
> >> # numResponses: 50001
> >> # numEntries: 50000  

ldapsearch -x -D "cn=metauser,o=dept1" -W -H ldaps://ldaphost -b
"ou=person,o=dept1" '(modifytimestamp>=20200212094321Z)'

> 
> Can you run this search please:
> 
> ldapsearch -D "cn=directory manager" -W -b cn=config -s base 
> nsslapd-sizelimit

# extended LDIF
#
# LDAPv3
# base <cn=config> with scope baseObject
# filter: (objectclass=*)
# requesting: nsslapd-sizelimit 
#

# config
dn: cn=config
nsslapd-sizelimit: 300000

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

> 
> Who are you authenticating as to do the search?  Do you have any 
> resource limits set on that entry?  Is "nsSizeLimit" set in their
> entry?

The entry of the bind user looks like this:
cn=metauser,o=dept1
objectClass: top
objectClass: Person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: metauser
sn: metauser
uid: metauser
userPassword: xxx

> 
> Thanks,
> 
> Mark
> |//|||
> 
> ||
> 
> /||/
> > Where else could I look for limits, that could be applicable here?
> > I am using 389-ds version 1.2.2. The search in question is in a
> > base that has around 55000 Entries and the filter is something like
> > (modifytimestamp>$oldtimestamp). The modifytimestamp-attribute is  
> > indexed for presence and equality.
> >
> > Thanks
> > Julian
> > _______________________________________________
> > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > To unsubscribe send an email to
> > 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List
> > Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> >  
> 



-- 
---------------------------------------------------------
| | Julian Kippels
| | M.Sc. Informatik
| |
| | Zentrum für Informations- und Medientechnologie
| | Heinrich-Heine-Universität Düsseldorf
| | Universitätsstr. 1
| | Raum 25.41.O1.32
| | 40225 Düsseldorf / Germany
| |
| | Tel: +49-211-81-14920
| | mail: kipp...@hhu.de
---------------------------------------------------------
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

Reply via email to