OVD Search Gives Error "LDAP: error code 4 - Sizelimit Exceeded"

(Doc ID 1301423.1)

Last updated on AUGUST 25, 2017

Applies to:

Oracle Virtual Directory - Version 11.1.1.1.0 and later
Information in this document applies to any platform.

Symptoms

Symptom 1

Gets the following error while doing a search against OVD

LDAP: error code 4 - Sizelimit Exceeded

Error doesn't occur if the search is executed as the Admin user "cn=orcladmin"

 

Anonymous Search:

ldapsearch -h mypc.oracle.com -p 6501 -b "cn=users,dc=oracle,dc=com" -s sub "objectclass=*" dn

ldap_search: Sizelimit exceeded
ldap_search: additional info: [LDAP: error code 4 - Sizelimit Exceeded]

 

Authenticated Search :

ldapsearch -h mypc.oracle.com -p 6501  -D "cn=user1,cn=users,dc=oracle,dc=com" -w welcome1 -b "cn=users,dc=oracle,dc=com" -s sub "objectclass=*" dn

ldap_search: Sizelimit exceeded
ldap_search: additional info: [LDAP: error code 4 - Sizelimit Exceeded]

 

Authenticated Search as Admin user:

lapsearch -h mypc.oracle.com -p 6501 -D "cn=orcladmin" -w password -b "cn=users,dc=oracle,dc=com" -s sub "objectclass=*" dn

No error, entries are returned

 

OR

Symptom 2

With "Authenticated User Search" parameter set to high value (example: 65,000)
ldapsearch queries that should return all entries (example: 20,000) is resulting with only a small number (example: 9000) and a sizelimit exceeded error.

Example Search and full output:
ldapsearch -h ovdhost.oracle.com -p 6501 -D "cn=orcladmin" -w <PASSWORD> -b "ou=AD,ou=Users,dc=oracle,dc=com" -L -s sub "(objectclass=inetOrgPerson)" uid
ldap_search: Sizelimit exceeded
ldap_search: additional info: [LDAP: error code 4 - Sizelimit Exceeded]

Example error from access.log:

[2012-02-27T14:09:00.289-05:00] [octetstring] [NOTIFICATION] [OVD-20044] [com.octetstring.accesslog] [tid: 33] [ecid: 0000JN0DhGW6eLTqy8mZMG1FIxHK00000M,0] conn=1 op=1 RESULT err=4 tag=0 nentries=9,000 etime=27,101 dbtime=0 mem=178,862,960/259,719,168

Notice the err=4

 

Changes

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms