[
https://issues.apache.org/jira/browse/KNOX-644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15401138#comment-15401138
]
Larry McCay commented on KNOX-644:
----------------------------------
[~risdenk] - thank you for your work on this!
I think these patches are important and should be targeted at our 0.10.0 (maybe
1.0.0) release.
One of the larger feature themes that I was thinking of addressing in 0.10.0 is
LDAP improvements.
These will fit in well with those.
I'm not sure that we need to improve the ApacheDS DEMO LDAP server here but
perhaps there is no other reasonable way to test for the handling of large
results without doing so. We'll have to consider that carefully.
I am going to set the Fix Version to 0.10.0 for tracking it for the next
feature bearing release.
> Limit/page results of LDAP group membership search
> ---------------------------------------------------
>
> Key: KNOX-644
> URL: https://issues.apache.org/jira/browse/KNOX-644
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Affects Versions: 0.6.0
> Reporter: Kevin Minder
> Priority: Critical
> Fix For: 0.10.0
>
> Attachments: KNOX-644.patch, ad_setup.ps1, create_groups_ldif.py,
> paging.patch
>
>
> Some users are finding that they have >1000 groups that would be returned
> given how Knox currently implements group lookup. ActiveDirectory currently
> limits search results to 1000 items and this causes failures that require
> workarounds at the client side. Ideally Knox's LDAP group search
> implementation would either limit/filter the results or page the result set
> that are unavoidably large.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
