Re: PageControl mode should not be affected by sizelimit (ITS#3367)

[ando@sys-net.it]

alexandrelabiche@yahoo.com wrote:

>Thanks for your response,
>
>Microsoft Active Directory react differently from
>penLDAP . Active Directory  autorize to dump its whole
>LDAP via Page Control Mode. So I Don't know which of
>two has the right behavior.
>
There is no "right" behavior; our interpretation of RFC 2696 is that the 
control must not be intended as a means to alter the administrative size 
limit on the server side.  You can use pagedResults that way if the 
administrator configures the DSA to do so, e.g. by setting

limits * size=1000 size.pr=unlimited

indicating that whoever is performing the search, a limit of 1000 
applies unless using pagedResults, which allows to return unlimited 
results.  This is AD's behavior, but by no means it should be considered 
the "right" one, and it is very unlikely this will ever become the 
default in OpenLDAP's slapd.

p.

>
>Yes I use "sizelimit -1" for our production
>Openldap(s).
>
>Bye
>
>--- ando@sys-net.it wrote:
>
>  
>
>>Let me add that if your want the default size limit
>>to be different (e.g.
>>higher than default) when the client is issuing the
>>paged results control,
>>this can be done (at the server side) by using
>>appropriate "limits"
>>directives.  See slapd.conf(5) for details.
>>
>>p.
>>
>>    
>>
>>>First, I assume you are referring to the
>>>      
>>>
>>server-side administrative
>>    
>>
>>>size limit and not to the sizeLimit the client
>>>      
>>>
>>actually requested.
>>    
>>
>>>The behavior of the OpenLDAP server is as
>>>      
>>>
>>intended.
>>    
>>
>>>The purpose of the paged results control, as
>>>      
>>>
>>discussed in RFC 2696,
>>    
>>
>>>is to "allow the client to control the rate of
>>>      
>>>
>>which
>>    
>>
>>>the server returns results".  The purpose is not
>>>      
>>>
>>to enable
>>    
>>
>>>return of additional results.
>>>
>>>The purpose of the OpenLDAP sizelimit
>>>      
>>>
>>administrative control, as
>>    
>>
>>>discussed in the OpenLDAP documentation, is to
>>>      
>>>
>>limit the size of the
>>    
>>
>>>result set, regardless of wether the client
>>>      
>>>
>>obtains the set all
>>    
>>
>>>at once, or in pages.  That is, the client is not
>>>      
>>>
>>allowed to page
>>    
>>
>>>around the administrative limit.
>>>
>>>If the administrator wishes to allow clients to
>>>      
>>>
>>obtain larger
>>    
>>
>>>result sets, they should simply raise the limit.
>>>
>>>This report will be closed.
>>>
>>>Kurt
>>>
>>>At 08:25 AM 10/18/2004, alexandrelabiche@yahoo.com
>>>      
>>>
>>wrote:
>>    
>>
>>>>Full_Name: alexandre labiche
>>>>Version: 2.2.17
>>>>OS: linux
>>>>URL: ftp://ftp.openldap.org/incoming/
>>>>Submission from: (NULL) (217.77.224.129)
>>>>
>>>>
>>>>Dear All,
>>>>
>>>>When I use perl-ldap or Java (with supplemental
>>>>        
>>>>
>>ldap Sun library) to
>>    
>>
>>>>retrieve
>>>>full search via Page Control:  My  search  are
>>>>        
>>>>
>>always  limited  by
>>    
>>
>>>>implicit
>>>>sizelimit (500).
>>>>
>>>>Is it normal ? For example I can retrieve  Full
>>>>        
>>>>
>>search (> 25000 people)
>>    
>>
>>>>on
>>>>Active Directory (implicit size limit 1000) via 
>>>>        
>>>>
>>same perl script  (or
>>    
>>
>>>>java
>>>>program) and using Page Control Mode
>>>>
>>>>
>>>>Regards.
>>>>        
>>>>
>>>
>>>      
>>>
>>-- 
>>Pierangelo Masarati
>>mailto:pierangelo.masarati@sys-net.it
>>
>>
>>    SysNet - via Dossi,8 27100 Pavia Tel:
>>+390382573859 Fax: +390382476497
>>
>>
>>
>>    
>>
>
>
>
>		
>_______________________________
>Do you Yahoo!?
>Declare Yourself - Register online to vote today!
>http://vote.yahoo.com
>
>
>  
>





    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497