[
https://issues.jboss.org/browse/WFLY-6780?page=com.atlassian.jira.plugin....
]
cyril leclerc edited comment on WFLY-6780 at 6/29/16 6:19 AM:
--------------------------------------------------------------
HI,
in fact to be more clear, the problem is this exception :
"LDAP: error code 4 - Sizelimit Exceeded"
because MaxPageSize is setted in AD to 500 and sometimes we have more than 1000 groups,
furthermore in the org.jboss.security there is i think 2 ways to configure it (tested the
first not second) :
in LdapExtModule.java (i recreate it and override it) : i add thos lines :
first the variable :
private static final String MAX_PAGE_SIZE = "maxPageSize";
then the code :
/**
* if there is more than 1000 groups in AD
*/
protected int maxPageSize = 500;
String maxPSize = (String) options.get(MAX_PAGE_SIZE);
if (maxPSize != null)
{
try
{
maxPageSize = Integer.parseInt(maxPSize);
}
catch (NumberFormatException e)
{
PicketBoxLogger.LOGGER.debugFailureToParseNumberProperty(MAX_PAGE_SIZE,
this.maxPageSize);
}
}
//set a maxPagesize
ctx.setRequestControls(new Control[]{
new PagedResultsControl(maxPageSize, Control.CRITICAL) });
and in logging module you can add this configuration :
<module-option name="maxPageSize" value="1000"/>
i think it should be available directly in JBOSS classes
Second solution, in same class :
// Query for roles matching the role filter
SearchControls constraints = new SearchControls();
constraints.setSearchScope(searchScope);
constraints.setTimeLimit(searchTimeLimit);
add this line (but i am not sure if it is working)
constraints.setCountLimit(3500);
i make a workaround with the first solution but a had to redeclare SecuritYActions.java
and Decode.java because protected classes
regards
was (Author: fdlprod):
HI,
in fact to be more clear, the problem is this exception :
"LDAP: error code 4 - Sizelimit Exceeded"
because MaxPageSize is setted in AD to 500 and sometimes we have more than 1000 groups,
furthermore in the org.jboss.security there is i think 2 ways to configure it (tested the
first not second) :
private static final String MAX_PAGE_SIZE = "maxPageSize";
in LdapExtModule.java (i recreate it and override it) : i add thos lines :
String maxPSize = (String) options.get(MAX_PAGE_SIZE);
if (maxPSize != null)
{
try
{
maxPageSize = Integer.parseInt(maxPSize);
}
catch (NumberFormatException e)
{
PicketBoxLogger.LOGGER.debugFailureToParseNumberProperty(MAX_PAGE_SIZE,
this.maxPageSize);
}
}
//set a maxPagesize
ctx.setRequestControls(new Control[]{
new PagedResultsControl(maxPageSize, Control.CRITICAL) });
and in logging module you can add this configuration :
<module-option name="maxPageSize" value="1000"/>
i think it should be available directly in JBOSS classes
Second solution, in same class :
// Query for roles matching the role filter
SearchControls constraints = new SearchControls();
constraints.setSearchScope(searchScope);
constraints.setTimeLimit(searchTimeLimit);
add this line (but i am not sure if it is working)
constraints.setCountLimit(3500);
i make a workaround with the first solution but a had to redeclare SecuritYActions.java
and Decode.java because protected classes
regards
could not spécify version 3 for ldap connection
-----------------------------------------------
Key: WFLY-6780
URL:
https://issues.jboss.org/browse/WFLY-6780
Project: WildFly
Issue Type: Feature Request
Components: Security
Reporter: cyril leclerc
Assignee: Darran Lofthouse
HI,
in case of using LDAPExtLoginModule and ldap realm if in active directory there is more
than 1000 groups it returns an error :
Caused by: javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit
Exceeded]; remaining name 'CN=Users,DC=realad,DC=ad'
i can't change in AD the MAXPAGESIZE parameter and i can't specify the module to
use version 3 of ldap how i can do ?
it is a big issue for me -)
--
This message was sent by Atlassian JIRA
(v6.4.11#64026)