Hi, Am Thu, 13 Feb 2020 08:05:04 -0500 schrieb Mark Reynolds <mreynolds@xxxxxxxxxx>: > On 2/13/20 5:37 AM, Julian Kippels wrote: > > Hi, > > > > I am having a small problem with a slightly larger lookup. The > > SizeLimit and LookthroughLimit are both set to 300000, but when I > > do a larger search, I still get: > > Did you restart the server after setting these limits? Yes, the server was restarted several times after setting the limits. > > What is the exact ldapsearch cpmmand you ran to reproduce this error? > > > > >> # search result > >> search: 2 > >> result: 4 Size limit exceeded > >> > >> # numResponses: 50001 > >> # numEntries: 50000 ldapsearch -x -D "cn=metauser,o=dept1" -W -H ldaps://ldaphost -b "ou=person,o=dept1" '(modifytimestamp>=20200212094321Z)' > > Can you run this search please: > > ldapsearch -D "cn=directory manager" -W -b cn=config -s base > nsslapd-sizelimit # extended LDIF # # LDAPv3 # base <cn=config> with scope baseObject # filter: (objectclass=*) # requesting: nsslapd-sizelimit # # config dn: cn=config nsslapd-sizelimit: 300000 # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 > > Who are you authenticating as to do the search? Do you have any > resource limits set on that entry? Is "nsSizeLimit" set in their > entry? The entry of the bind user looks like this: cn=metauser,o=dept1 objectClass: top objectClass: Person objectClass: organizationalPerson objectClass: inetOrgPerson cn: metauser sn: metauser uid: metauser userPassword: xxx > > Thanks, > > Mark > |//||| > > || > > /||/ > > Where else could I look for limits, that could be applicable here? > > I am using 389-ds version 1.2.2. The search in question is in a > > base that has around 55000 Entries and the filter is something like > > (modifytimestamp>$oldtimestamp). The modifytimestamp-attribute is > > indexed for presence and equality. > > > > Thanks > > Julian > > _______________________________________________ > > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > > To unsubscribe send an email to > > 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List > > Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx > > > -- --------------------------------------------------------- | | Julian Kippels | | M.Sc. Informatik | | | | Zentrum für Informations- und Medientechnologie | | Heinrich-Heine-Universität Düsseldorf | | Universitätsstr. 1 | | Raum 25.41.O1.32 | | 40225 Düsseldorf / Germany | | | | Tel: +49-211-81-14920 | | mail: kippels@xxxxxx --------------------------------------------------------- _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx