OUD 12c - OUD does not Respect Size Limits when Using "--proxyAs" (Proxy Authorization) (Doc ID 2873045.1)

Last updated on MARCH 06, 2023

Applies to:

Symptoms

On : 12.2.1.4.200827 version, Configuration

Incorrect behavior of size limits settings for queries with --proxyAs option e.g.

Current behavior and order of precedence:
1) account: "ds-rlim-size-limit" - Use if set, otherwise use proxy account.
2) proxy account: "ds-rlim-size-limit" - Use if set, otherwise use "size-limit" global property.
3) size-limit global property

To clarify further: if there no setting for "ds-rlim-size-limit" defined for account, then the proxy account setting is used.
If the proxy account setting does not exist then the global property for "size-limit" will be used.

The behavior SHOULD be:

Bind DN account ds-rlim-size-limit should not be used when running ldapsearch with --proxyAs

Size limit should be calculated as either of the below:
(1) ds-rlim-size-limit defined for the authzID account, or, if this is missing,
(2) the size-limit defined in the global configuration.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.