[Date Prev][Date Next]
Re: Big searches.
You can always use tcp wrappers to allow only a handful of hosts to
connect to your ldap server.
-- On May 3, 6:30pm, Roel van Meer wrote:
> Subject: Re: Big searches.
> "Killian, John (Contractor)" wrote:
> > > The question I was asking was more about how to get, say 10.000, records
> > > out of an ldap db the best possible way: with a single or with multiple
> > searches?
> > When we allow limits to be set as high as 10,000, do we not run the risk of
> > exposing the directory to Denial of Service attacks?
> That's a good point. DOS might be overcome by using it only
> locally, but it increases the risk of performance loss due to
> misconfiguration of something. i think this is the first good
> reason for going with the multiple-search approach. Thanks!
> 1A First Alternative email@example.com www.alt001.com
> Linvision BV firstname.lastname@example.org
-- End of excerpt from Roel van Meer --
email@example.com Unix Systems Group, UC Riverside