LDAP Data Connector MaxResults not honored issue

[Herron, Joel D]

Thanks for the insight, that makes more sense now, hopefully this will be the fodder I need to abandon this mechanism as I've never been a fan of it. 

On 5/17/21, 1:16 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

    *EXTERNAL EMAIL*

    Aside from noting that relying on the presence of data from the resolver to apply higher security means you're failing open (errors are obviously inevitable):

    I see this comment in the search class:
                        // It's possible for the LDAP to return partial results and report either a size limit or
                        // time limit result code. Throw if we don't receive all results.

    And:
    https://issues.shibboleth.net/jira/browse/IDP-1440

    So the exception is deliberate. I think that was a change in V4 because it wasn't handling perhaps other kinds of errors properly.

    I can add something to the release notes about it.

    -- Scott





    -- 
    For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net