URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
HonzaCholasta commented:
"""
Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/d84edc43e55c2f7c30614a4a5268aeb58e33a087
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
tomaskrizek commented:
"""
We examined the WebUI side and it behaves as expected - the size limit is
respected when viewing certificates.
"""
See the full comment at
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
tomaskrizek commented:
"""
The behavior of the command seems to be correct now, but I'm also not sure
about the WebUI. There seems to be a limit of 20 items when displayed in WebUI
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
HonzaCholasta commented:
"""
I have identified some issues in search limit handling in `cert-find` and fixed
them in an additional commit. See commit message for details.
"""
See the
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@stlaz as I see it, the `_ldap_search` can potentially search all objects of a
particular type (user/service/host), which have `(userCertificate=*)`. The
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
stlaz commented:
"""
@frasertweedale if `_ldap_search` is performed with correct filters,
`sizelimit=0` is not the correct solution at least for CLI which should either
follow the
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@tomaskrizek @HonzaCholasta it looks like the problem is:
1. subsearches are conducted in order:
1. `_cert_search` (if `'certificate' in options` add
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@tomaskrizek @HonzaCholasta it looks like the problem is:
1. subsearches are conducted in order:
1. `_cert_search` (if `'certificate' in options` add
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@tomaskrizek @HonzaCholasta it looks like the problem is:
1. subsearches are conducted in order:
1. `_cert_search` (if `'certificate' in options` add
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@tomaskrizek @HonzaCholasta it looks like the problem is:
1. subsearches are conducted in order:
1. `_cert_search` (if `'certificate' in options` add
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
@tomaskrizek yes, I can reproduce with your steps.
"""
See the full comment at
https://github.com/freeipa/freeipa/pull/359#issuecomment-270274050
--
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
tomaskrizek commented:
"""
@frasertweedale
I ran into this issue when I created 100 users with different user certificates:
```
for i in {300..400}; do
ipa user-add "test$i" --first T
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
frasertweedale commented:
"""
This change is working for me, including having the expected behaviour for
WebUI. @tomaskrizek please provide steps to reproduce your WebUI behaviour.
"""
URL: https://github.com/freeipa/freeipa/pull/359
Title: #359: dogtag: search past the first 100 certificates
tomaskrizek commented:
"""
With this fix, more than 100 certificates are displayed and click-able from
WebUI overview. However, I'm still getting an error message pop up saying
```
14 matches
Mail list logo
