[ https://issues.apache.org/jira/browse/OAK-4005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15197685#comment-15197685 ]
Manfred Baedke commented on OAK-4005: ------------------------------------- Fixed in trunk: r1735267. > LdapIdentityProvider.getEntries() is prone to OOME. > --------------------------------------------------- > > Key: OAK-4005 > URL: https://issues.apache.org/jira/browse/OAK-4005 > Project: Jackrabbit Oak > Issue Type: Improvement > Components: auth-ldap > Affects Versions: 1.2.11, 1.3.15, 1.0.27 > Reporter: Manfred Baedke > Assignee: Manfred Baedke > Priority: Minor > > The public methods LdapIdentityProvider.listUsers() and > LdapIdentityProvider.listGroups() both call > LdapIdentityProvider.getEntries(...), which tries to collect all matching > results from the backend in one LinkedList. Since typical LDAP directories > are quite huge, this will usually yield an OutOfMemoryError. > We'd need a cursor with connection handling here. -- This message was sent by Atlassian JIRA (v6.3.4#6332)