[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-19 Thread Bret Wortman via FreeIPA-users
On 02/19/2018 07:55 AM, Florence Blanc-Renaud wrote: On 02/19/2018 12:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/16/2018 11:54 AM, Florence Blanc-Renaud wrote: On 02/15/2018 06:42 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 12:27 PM, Florence Blanc-Renaud wrote: On

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-19 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/19/2018 12:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/16/2018 11:54 AM, Florence Blanc-Renaud wrote: On 02/15/2018 06:42 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 12:27 PM, Florence Blanc-Renaud wrote: On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote:

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-19 Thread Bret Wortman via FreeIPA-users
On 02/16/2018 11:54 AM, Florence Blanc-Renaud wrote: On 02/15/2018 06:42 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 12:27 PM, Florence Blanc-Renaud wrote: On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: On

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-16 Thread Givaldo Lins via FreeIPA-users
Hey Florence Your suggestion seems to be fixed the limit problem for my case. That is interesting because when checking the logs I see the search using my user cn but the anonymous-limit change was effective somehow. Thank you all for your help. — Givaldo Lins > On Feb 16, 2018, at 8:54 AM,

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-16 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/15/2018 06:42 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 12:27 PM, Florence Blanc-Renaud wrote: On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote:

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Givaldo Lins via FreeIPA-users
lt;freeipa-users@lists.fedorahosted.org> >> Para: "FreeIPA users list" <freeipa-users@lists.fedorahosted.org> >> Cc: "Bret Wortman" <bret.wort...@damascusgrp.com>, "Florence Blanc-Renaud" >> <f...@redhat.com> >> Enviadas: Qu

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Givaldo Lins via FreeIPA-users
Quinta-feira, 15 de fevereiro de 2018 9:27:48 Assunto: [Freeipa-users] Re: Fixing limit on DNS searches On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote: > On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: >> On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote:

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Bret Wortman via FreeIPA-users
On 02/15/2018 12:27 PM, Florence Blanc-Renaud wrote: On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/15/2018 05:01 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 11:47 AM, Bret Wortman via

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Bret Wortman via FreeIPA-users
On 02/15/2018 09:29 AM, Florence Blanc-Renaud wrote: On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 11:47 AM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 04:50 AM, Florence

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/15/2018 02:40 PM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 11:47 AM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 04:50 AM, Florence Blanc-Renaud wrote: On 02/15/2018 10:08 AM, Florence

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Bret Wortman via FreeIPA-users
On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 11:47 AM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 04:50 AM, Florence Blanc-Renaud wrote: On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Bret Wortman via FreeIPA-users
On 02/15/2018 07:09 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 11:47 AM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 04:50 AM, Florence Blanc-Renaud wrote: On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/15/2018 11:47 AM, Bret Wortman via FreeIPA-users wrote: On 02/15/2018 04:50 AM, Florence Blanc-Renaud wrote: On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret Wortman wrote: On 02/14/2018 10:22 AM, Florence Blanc-Renaud wrote: On

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Bret Wortman via FreeIPA-users
On 02/15/2018 04:50 AM, Florence Blanc-Renaud wrote: On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret Wortman wrote: On 02/14/2018 10:22 AM, Florence Blanc-Renaud wrote: On 02/14/2018 12:52 PM, Bret Wortman via FreeIPA-users wrote: I did

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Alexander Bokovoy via FreeIPA-users
On to, 15 helmi 2018, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret Wortman wrote: On 02/14/2018 10:22 AM, Florence Blanc-Renaud wrote: On 02/14/2018 12:52 PM, Bret Wortman via FreeIPA-users

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-15 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/15/2018 10:08 AM, Florence Blanc-Renaud via FreeIPA-users wrote: On 02/14/2018 05:58 PM, Bret Wortman wrote: On 02/14/2018 10:22 AM, Florence Blanc-Renaud wrote: On 02/14/2018 12:52 PM, Bret Wortman via FreeIPA-users wrote: I did figure out that I can use # ldapsearch -D 'directory

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Rob Crittenden via FreeIPA-users
Bret Wortman via FreeIPA-users wrote: > I did figure out that I can use > > # ldapsearch -D 'directory manager' -W -E pr=2 -b > idnsname=damascusgrp.com,cn=dns,dc=damascusgrp,dc=com > > to list out all the entries, but the format isn't what I'm expecting. > > What I'm actually trying to do

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Bret Wortman via FreeIPA-users
On 02/14/2018 10:22 AM, Florence Blanc-Renaud wrote: On 02/14/2018 12:52 PM, Bret Wortman via FreeIPA-users wrote: I did figure out that I can use # ldapsearch -D 'directory manager' -W -E pr=2 -b idnsname=damascusgrp.com,cn=dns,dc=damascusgrp,dc=com to list out all the entries, but the

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Florence Blanc-Renaud via FreeIPA-users
On 02/14/2018 12:52 PM, Bret Wortman via FreeIPA-users wrote: I did figure out that I can use # ldapsearch -D 'directory manager' -W -E pr=2 -b idnsname=damascusgrp.com,cn=dns,dc=damascusgrp,dc=com to list out all the entries, but the format isn't what I'm expecting. What I'm actually

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Bret Wortman via FreeIPA-users
I did figure out that I can use # ldapsearch -D 'directory manager' -W -E pr=2 -b idnsname=damascusgrp.com,cn=dns,dc=damascusgrp,dc=com to list out all the entries, but the format isn't what I'm expecting. What I'm actually trying to do is move our whole infrastructure from one set of

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Bret Wortman via FreeIPA-users
Also, this doesn't solve the fact that the Web UI always produces an error dialog whenever accessing our primary zone. On 02/13/2018 02:19 PM, Natxo Asenjo via FreeIPA-users wrote: On Tue, Feb 13, 2018 at 8:13 PM, Natxo Asenjo > wrote:

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Bret Wortman via FreeIPA-users
I pulled up our dse.ldif and we've got: nsslapd-sizelimit: 9 and nsslapd-lookthroughlimit: 9 nsslapd-idlistscanlimit: 9 So I'm still not sure why I'm being limited to 5000 in my query response. In fact, the number 5000 doesn't exist in dse.ldif at all. BTW, I misspoke in my

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-14 Thread Bret Wortman via FreeIPA-users
Thanks. Is it possible to list the DNS entries using ldapsearch? I've been using: # ipa dnsrecord-find --all On 02/13/2018 02:13 PM, Natxo Asenjo via FreeIPA-users wrote: On Tue, Feb 13, 2018 at 3:33 PM, Bret Wortman via FreeIPA-users

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-13 Thread Natxo Asenjo via FreeIPA-users
On Tue, Feb 13, 2018 at 8:13 PM, Natxo Asenjo wrote: > > the canonical way to do this is using ldap paging, with ldapsearch you > could try using the -E pr= parameter, where could be 1000 for > instance. That way you know you are always under the limit imposed

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-13 Thread Natxo Asenjo via FreeIPA-users
On Tue, Feb 13, 2018 at 3:33 PM, Bret Wortman via FreeIPA-users < freeipa-users@lists.fedorahosted.org> wrote: > I've run up against a limit I can't seem to adjust. > > When listing a particular DNS zone which has well over 5000 hosts in it, > we keep getting "Search result has been truncated:

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-13 Thread Bret Wortman via FreeIPA-users
Looking at it now. On 02/13/2018 01:09 PM, Rob Crittenden wrote: Bret Wortman via FreeIPA-users wrote: I've run up against a limit I can't seem to adjust. When listing a particular DNS zone which has well over 5000 hosts in it, we keep getting "Search result has been truncated: Configured

[Freeipa-users] Re: Fixing limit on DNS searches

2018-02-13 Thread Rob Crittenden via FreeIPA-users
Bret Wortman via FreeIPA-users wrote: > I've run up against a limit I can't seem to adjust. > > When listing a particular DNS zone which has well over 5000 hosts in it, > we keep getting "Search result has been truncated: Configured > administrative server limit exceeded." > > I've tried fixing