LDAP Data Connector MaxResults not honored issue
Cantor, Scott
cantor.2 at osu.edu
Mon May 17 18:16:05 UTC 2021
Aside from noting that relying on the presence of data from the resolver to apply higher security means you're failing open (errors are obviously inevitable):
I see this comment in the search class:
// It's possible for the LDAP to return partial results and report either a size limit or
// time limit result code. Throw if we don't receive all results.
And:
https://issues.shibboleth.net/jira/browse/IDP-1440
So the exception is deliberate. I think that was a change in V4 because it wasn't handling perhaps other kinds of errors properly.
I can add something to the release notes about it.
-- Scott
More information about the users
mailing list