OUD 11g / 12c - How to Set the Resource Limit Parameter when "Result Code: 11 (Administrative Limit Exceeded)" Occurs
(Doc ID 2477953.1)
Last updated on MARCH 22, 2024
Applies to:
Oracle Unified Directory - Version 11.1.2.3.180717 and laterInformation in this document applies to any platform.
Symptoms
Created cn=WEB_ADMIN user for an application to connect to OUD.
Permission:
(target = "ldap:///ou=people,SUFFIX_DN")(targetattr = "*")(targetscope = "subtree") (version 3.0; acl "Web_Admin"; allow (compare,export,read,import,write,search,proxy,add,selfwrite,delete) userdn = "ldap:///cn=WEB_ADMIN,cn=systemids,ou=people,dc=SUFFIX_DN";)
LDAP Command:
$ ./ldapsearch -h localhost -p LDAP_PORT -D "cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN" -b "SUFFIX_DN" -s sub "(&(uid=*)(objectclass=person))"
Password for user 'cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN':
SEARCH operation failed
Result Code: 11 (Administrative Limit Exceeded)
Additional Information: This search operation has checked the maximum of 5000 entries for matches
Access Logs
[19/Nov/2018:14:35:11 +0530] CONNECT conn=2431801 from=127.0.0.1:<PORT> to=<IP>:<LDAP_PORT> protocol=LDAP
[19/Nov/2018:14:35:11 +0530] DISCONNECT conn=2431801 reason="Client Disconnect"
[19/Nov/2018:14:35:15 +0530] CONNECT conn=2431802 from=<IP>:<PORT> to=<IP>:<LDAP_PORT> protocol=LDAP
[19/Nov/2018:14:35:15 +0530] BIND REQ conn=2431802 op=0 msgID=1 type=SIMPLE dn="cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN" version=3
[19/Nov/2018:14:35:15 +0530] BIND RES conn=2431802 op=0 msgID=1 result=0 authDN="cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN" etime=2
[19/Nov/2018:14:35:15 +0530] SEARCH REQ conn=2431802 op=1 msgID=2 base="SUFFIX_DN" scope=sub filter="(&(uid=*)(objectclass=person))" attrs="ALL"
[19/Nov/2018:14:35:15 +0530] SEARCH RES conn=2431802 op=1 msgID=2 result=11 message="This search operation has checked the maximum of 5000 entries for matches" nentries=0 etime=15
[19/Nov/2018:14:35:15 +0530] UNBIND REQ conn=2431802 op=2 msgID=3
[19/Nov/2018:14:35:15 +0530] DISCONNECT conn=2431802 reason="Client Disconnect"
[19/Nov/2018:14:35:11 +0530] DISCONNECT conn=2431801 reason="Client Disconnect"
[19/Nov/2018:14:35:15 +0530] CONNECT conn=2431802 from=<IP>:<PORT> to=<IP>:<LDAP_PORT> protocol=LDAP
[19/Nov/2018:14:35:15 +0530] BIND REQ conn=2431802 op=0 msgID=1 type=SIMPLE dn="cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN" version=3
[19/Nov/2018:14:35:15 +0530] BIND RES conn=2431802 op=0 msgID=1 result=0 authDN="cn=WEB_ADMIN,cn=systemids,ou=people,SUFFIX_DN" etime=2
[19/Nov/2018:14:35:15 +0530] SEARCH REQ conn=2431802 op=1 msgID=2 base="SUFFIX_DN" scope=sub filter="(&(uid=*)(objectclass=person))" attrs="ALL"
[19/Nov/2018:14:35:15 +0530] SEARCH RES conn=2431802 op=1 msgID=2 result=11 message="This search operation has checked the maximum of 5000 entries for matches" nentries=0 etime=15
[19/Nov/2018:14:35:15 +0530] UNBIND REQ conn=2431802 op=2 msgID=3
[19/Nov/2018:14:35:15 +0530] DISCONNECT conn=2431802 reason="Client Disconnect"
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |