[389-users] v1.2 and v1.3 differences in return results for lookthroughlimit exceeding search

Hi,

In the following example, consumer replica v1.3 return err=11 with no entries. v1.2 return err=4, with the first 20 entries which is the size limit. Is this difference a change in the implementation or a configuration difference I am missing?

The look through limit is the default 5000. The tree has more than 50,000 entries.

What is even more puzzling is that the master repica running v1.3 return the same result as v1.2. Only consumer replica v1.3 return err=11 with no entry.

Thank you very much.


389-Directory/1.3.5.10 B2017.115.1411, consumer replica

$ ldapsearch -x -H ldaps://ldapv1.3:636 -b "ou=People,dc=example,dc=com" -s one -a always -z 1000 "(objectClass=*)" "hasSubordinates" "objectClass"
# extended LDIF
#
# LDAPv3
# base <ou=People,dc=example,dc=com> with scope oneLevel
# filter: (objectClass=*)
# requesting: hasSubordinates objectClass
#

# search result
search: 2
result: 11 Administrative limit exceeded

# numResponses: 1

access log:
RESULT err=11 tag=101 nentries=0 etime=0 notes=A



389-Directory/1.2.11.15 B2016.155.1910


$ ldapsearch -x -H ldaps://ldapv1.2:636 -b "ou=People,dc=example,dc=com" -s one -a always -z 1000 "(objectClass=*)" "hasSubordinates" "objectClass"
# extended LDIF
#
# LDAPv3
# base <ou=People,dc=uwindsor,dc=ca> with scope oneLevel
# filter: (objectClass=*)
# requesting: hasSubordinates objectClass
#

….

# search result
search: 2
result: 4 Size limit exceeded

# numResponses: 21
# numEntries: 20
access log
RESULT err=4 tag=101 nentries=20 etime=0 notes=A

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org