Bug#378832: [Pkg-openldap-devel] Bug#378832: limits directive is not
working in slapd.conf
Quanah Gibson-Mount
quanah at stanford.edu
Wed Jul 19 22:36:43 UTC 2006
--On Wednesday, July 19, 2006 9:14 PM +0200 Matthijs Mohlmann
<matthijs at cacholong.nl> wrote:
>
> I've tried this example on a freshly install of slapd but I still can't
> get that to work. Do you have some pointers to get some more information
> about the parameter.
>
> I tried this:
> limits users time.soft=unlimited time.hard=unlimited size.soft=1
> size.hard=1 limits anonymous time.soft=unlimited time.hard=unlimited
> size.soft=1 size.hard=1
> limits dn.exact="cn=test,dc=cacholong,dc=nl" time.soft=unlimited
> time.hard=unlimited size.soft=1 size.hard=1
Okay, I just tried:
limits dn.exact="uid=cadabra,cn=accounts,dc=stanford,dc=edu"
time.soft=unlimited time.hard=unlimited size.soft=10 size.hard=10
where "cadabra" is a test account of mine, and I hit the sizelimit
restriction immediately:
# search result
search: 5
result: 4 Size limit exceeded
# numResponses: 11
# numEntries: 10
So it stopped after returning 10 entries, just like it should.
I then changed the line to:
limits users time.soft=unlimited time.hard=unlimited size.soft=10
size.hard=10
restarted slapd, and again, hit the same limit:
# search result
search: 5
result: 4 Size limit exceeded
# numResponses: 11
# numEntries: 10
So again, the line worked.
Then, I tried:
limits users time.soft=unlimited time.hard=unlimited size.soft=1 size.hard=1
stopped slapd, restarted, and again, I hit the correct limit:
# search result
search: 5
result: 4 Size limit exceeded
# numResponses: 2
# numEntries: 1
Then, I tried:
limits users time.soft=unlimited time.hard=unlimited size=1
restarted slapd, and again I hit the correct limit:
# search result
search: 5
result: 4 Size limit exceeded
# numResponses: 2
# numEntries: 1
So using OpenLDAP 2.3.24 (not from debian, however), it all works correctly
for me.
--Quanah
--
Quanah Gibson-Mount
Principal Software Developer
ITS/Shared Application Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html
More information about the Pkg-openldap-devel
mailing list