Re: LDAP_CONTROL_PAGED control

[Howard Chu <hyc@symas.com>]

Vincent MATHIEU wrote:
> I try to do a search in an openldap server.
> This search can return a large number of entries (> 30 000) ; the 
> sizelimit parameter in slapd.conf is set to 2100.
>
> I use Net::LDAP perl module, LDAP_CONTROL_PAGED control and a code like 
> the example in paged.pm 
> (http://search.cpan.org/~gbarr/perl-ldap/lib/Net/LDAP/Control/Paged.pm).
> I set size parameter of Net::LDAP::Control::Paged to 1000.
>
> openldap return's 1000 entries with 2 first search call, but an error 
> code 4 (Sizelimit exceeded) occurs in third search call :

> Is it the normal behaviour ?

Yes. Using the page control doesn't change the overall size limit of the 
search request. (It's known that Microsoft Active Directory behaves 
differently here, but it's also clear that they are broken in this area. 
One among many things they do in violation of the specs.)

> How can I do to get all entries from ou people ?

Use an identity that has the privilege to use a larger sizelimit.

--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  Chief Architect, OpenLDAP     http://www.openldap.org/project/