Muehlenhoff has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/348071 )

Change subject: Allow paged searches to exceed the size limit for searches
......................................................................

Allow paged searches to exceed the size limit for searches

This is practically the same as patch 364790 which had a syntax error:
The "limits" option needs to refer to a DN or a set of users. In this
case use "users" which makes the limit effect all authenticated users.

Bug: T162745
Change-Id: I553097e19bedf1b5dd8b05bc93c2a6f6aa2aa9d3
---
M modules/openldap/templates/slapd.erb
1 file changed, 3 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/71/348071/1

diff --git a/modules/openldap/templates/slapd.erb 
b/modules/openldap/templates/slapd.erb
index 66c4f66..26717f1 100644
--- a/modules/openldap/templates/slapd.erb
+++ b/modules/openldap/templates/slapd.erb
@@ -42,10 +42,13 @@
 moduleload  unique
 
 # Maximum number of entries that is returned for a search operation
+# Limit size of individual searches, but allow a paged query to get the whole 
db
 <% if @size_limit then %>
 sizelimit <%= @size_limit %>
+limits users size.pr=<%= @size_limit %> size.prtotal=unlimited
 <% else %>
 sizelimit 2048
+limits users size.pr=2048 size.prtotal=unlimited
 <% end %>
 
 # 10 minute idle timeout for ill-behaved clients

-- 
To view, visit https://gerrit.wikimedia.org/r/348071
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I553097e19bedf1b5dd8b05bc93c2a6f6aa2aa9d3
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to