Re: (ITS#8724) slapo-pcache truncates remote results

[quanah@symas.com]

--On Wednesday, September 06, 2017 6:15 PM +0000 adam@brainfood.com wrote:

> Full_Name: Adam Heath
> Version: 2.4.44
> OS: debian stretch
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (99.146.168.62)
>
>
> I have configured slapd to proxy to a remote server.
>
> Using ldapsearch, I can talk directly to that remote server, and using the
> pr=200/noprompt option, I get back 2900 results.
>
> Pointing ldapsearch at localhost, *without* pcache, I get the same set of
> results(pages, and the final count is correct).
>
> When I enabled slapo-pcache, with *no* attribute sets, then the paging
> options are removed, and I get only 2000 results(the max-size from the
> remote server).

Hi Adam,

slapo-pcahce is acting in the correct fashion.  It would appear that your 
remote system is Active Directory, which in typical Microsoft fashion, 
deliberately mis-implements paged results so that it incorrectly ignores 
the maxsize setting when paged results are in use (contrary to 
specifications).  I would generally suggest talking to the AD administrator 
so that the bind identity of the pcache database is not subject to the 
maxsize limitation.

This ITS will be closed.

Regards,
Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>