LDAP Data Connector MaxResults not honored issue

Cantor, Scott cantor.2 at osu.edu
Mon May 17 18:16:05 UTC 2021


Aside from noting that relying on the presence of data from the resolver to apply higher security means you're failing open (errors are obviously inevitable):

I see this comment in the search class:
                    // It's possible for the LDAP to return partial results and report either a size limit or
                    // time limit result code. Throw if we don't receive all results.

And:
https://issues.shibboleth.net/jira/browse/IDP-1440

So the exception is deliberate. I think that was a change in V4 because it wasn't handling perhaps other kinds of errors properly.

I can add something to the release notes about it.

-- Scott







More information about the users mailing list