[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: size limit problem in 2.4.10
Howard Chu wrote:
> Jeronimo Zucco wrote:
>> Hi list. I'm trying to limit queries for one user in my slapd.conf,
>> with this rules:
>>
>> limits dn.exact="cn=user1,dc=domain,dc=com" size.soft=50 size.hard=50
>> limits anonymous size.soft=50 size.hard=50
>> limits users size.soft=50 size.hard=50
>> sizelimit unlimited
>>
>>
>> But "user1" isn't limited with this rules. If I set "sizelimit 50",
>> the syncrepl doesn't work, even I set no limit in my syncrepl directive
>> or setting limits for replicator user.
>>
>> This rules was working fine in openldap 2.3.35 until I upgrade to
>> 2.4.10. :-(
>>
>> Somebody have tips, mans, or ideias to solve this issue ?
>
> Works fine for me. What do you see in the slapd debug output? (Run
> with -d7)
> For example, I get:
>
> SRCH "dc=example,dc=com" 2 0 0 0 0
> ber_scanf fmt (m) ber:
> filter: (objectClass=*)
> ber_scanf fmt ({M}}) ber:
> attrs: 1.1
> ==> limits_get: conn=1 op=1 dn="cn=bjorn jensen,ou=information
> technology division,ou=people,dc=example,dc=com"
> <== limits_get: type=DN match=EXACT dn="cn=bjorn jensen,ou=information
> technology division,ou=people,dc=example,dc=com"
> => bdb_search
>
I see:
<= get_ctrls: n=1 rc=0 err=""
attrs: * +
==> limits_get: conn=95 op=1 dn="cn=replicator,dc=domain,dc=com"
=> bdb_search
bdb_dn2entry("dc=ucs,dc=br")
base_candidates: base: "dc=domain,dc=com" (0x00000001)
send_ldap_result: conn=95 op=1 p=3
send_ldap_result: err=0 matched="" text=""
=> bdb_search
bdb_dn2entry("dc=domain,dc=com")
search_candidates: base="dc=domain,dc=com" (0x00000001) scope=2
=> bdb_dn2idl("dc=domain,dc=com")
=> bdb_presence_candidates (objectClass)
bdb_search_candidates: id=-1 first=1 last=218544
=> send_search_entry: conn 95 dn="dc=domain,dc=com"
ber_flush2: 696 bytes to sd 47
It doesn't get limits_get: type=DN match=EXACT
:-(
--
Jeronimo Zucco
LPIC-1 Linux Professional Institute Certified
Núcleo de Processamento de Dados
Universidade de Caxias do Sul
http://jczucco.blogspot.com