yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => grizzly-rc1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1083463

Title:
  Size limit exceeded when querying AD with more than 1000 entries

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  When the objects retrieved via LDAP module surpass 1000, Active
  Directory refuses the query operation with an exception 'size limit
  exceeded'.

  2012-11-27 08:10:11    ERROR [root] {'desc': 'Size limit exceeded'}
  Traceback (most recent call last):
    File "/usr/lib/python2.6/site-packages/keystone/common/wsgi.py", line 204, in __call__
      result = method(context, **params)
    File "/usr/lib/python2.6/site-packages/keystone/identity/core.py", line 467, in get_users
      return {'users': self.identity_api.list_users(context)}
    File "/usr/lib/python2.6/site-packages/keystone/common/manager.py", line 47, in _wrapper
      return f(*args, **kw)
    File "/usr/lib/python2.6/site-packages/keystone/identity/backends/ldap/core.py", line 138, in list_users
      return self.user.get_all()
    File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 217, in get_all
      for x in self._ldap_get_all(filter)]
    File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 204, in _ldap_get_all
      return conn.search_s(self.tree_dn, ldap.SCOPE_ONELEVEL, query)
    File "/usr/lib/python2.6/site-packages/keystone/common/ldap/core.py", line 318, in search_s
      res = self.conn.search_s(dn, scope, query)
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 516, in search_s
      return self.search_ext_s(base,scope,filterstr,attrlist,attrsonly,None,None,timeout=self.timeout)
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 510, in search_ext_s
      return self.result(msgid,all=1,timeout=timeout)[1]
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 436, in result
      res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 440, in result2
      res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 446, in result3
      ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)
    File "/usr/lib64/python2.6/site-packages/ldap/ldapobject.py", line 96, in _ldap_call
      result = func(*args,**kwargs)
  SIZELIMIT_EXCEEDED: {'desc': 'Size limit exceeded'}
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] ******************** RESPONSE HEADERS ********************
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] Vary = X-Auth-Token
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] Content-Type = application/json
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] Content-Length = 175
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi]
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] ******************** RESPONSE BODY ********************
  2012-11-27 08:10:11    DEBUG [keystone.common.wsgi] {"error": {"message": "An unexpected error prevented the server from fulfilling your request. {'desc': 'Size limit exceeded'}", "code": 500, "title": "Internal Server Error"}}

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1083463/+subscriptions