openldap 2.4.25 is better, but still has the LDAP_SIZELIMIT_EXCEEDED bug.A
possible fix is to add a call to limits_check() in sssvlv_op_search()
(sssvlv.c) :
--- sssvlv.c 2011-03-24 02:04:28.000000000 +0000+++ sssvlv.c.new
2011-06-16 18:07:36.000000000 +0100@@ -839,6 +839,7 @@ sess_id =
find_session_by_context( si->svi_max_percon, op->o_conn->c_conn_idx, vc ?
vc->vc_context : NO_VC_CONTEXT, ps ? ps->ps_cookie : NO_PS_COOKIE ); if
( sess_id >= 0 ) { so = sort_conns[op->o_conn->c_conn_idx][sess_id];+
limits_check( op, rs ); /* Is it a continuation of
a VLV search? */ if ( !vc || so->so_vlv <= SLAP_CONTROL_IGNORED ||
vc->vc_context != so->so_vcontext ) {