[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Big searches.

"Killian, John (Contractor)" wrote:
> > The question I was asking was more about how to get, say 10.000, records
> > out of an ldap db the best possible way: with a single or with multiple
> searches?
> When we allow limits to be set as high as 10,000, do we not run the risk of
> exposing the directory to Denial of Service attacks?

That's a good point. DOS might be overcome by using it only
locally, but it increases the risk of performance loss due to
misconfiguration of something. i think this is the first good
reason for going with the multiple-search approach. Thanks!



1A First Alternative rolek@alt001.com    www.alt001.com
Linvision BV         rolek@linvision.com