[
https://issues.apache.org/jira/browse/OAK-4005?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Manfred Baedke resolved OAK-4005.
---------------------------------
Resolution: Fixed
> LdapIdentityProvider.getEntries() is prone to OOME.
> ---------------------------------------------------
>
> Key: OAK-4005
> URL: https://issues.apache.org/jira/browse/OAK-4005
> Project: Jackrabbit Oak
> Issue Type: Improvement
> Components: auth-ldap
> Affects Versions: 1.2.11, 1.3.15, 1.0.27, 1.4.0
> Reporter: Manfred Baedke
> Assignee: Manfred Baedke
> Priority: Minor
> Fix For: 1.6
>
>
> The public methods LdapIdentityProvider.listUsers() and
> LdapIdentityProvider.listGroups() both call
> LdapIdentityProvider.getEntries(...), which tries to collect all matching
> results from the backend in one LinkedList. Since typical LDAP directories
> are quite huge, this will usually yield an OutOfMemoryError.
> We'd need a cursor with connection handling here.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
