yahoo-eng-team team mailing list archive

[OpenStack Infra <1712415@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/511822
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=f776fc18383fcfdc97932eaaab261a0b85e0ef68
Submitter: Zuul
Branch:    master

commit f776fc18383fcfdc97932eaaab261a0b85e0ef68
Author: prashkre <prashkre@xxxxxxxxxx>
Date:   Fri Oct 13 17:31:39 2017 +0530

    Handle ldap size limit exeeded exception
    
    LDAP servers have sizelimit configuration to limit the number of
    user/group objects that can be returned for an LDAP query. This
    change catches the size limit exceeded exception when users/groups
    returned from ldap search query exceeds the configured limit and
    responds with an appropriate error message instead of default
    500 error message.
    
    Change-Id: I9949bb7d458b4b037616c701e0e4d362bfa36473
    Closes-Bug: #1712415


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1712415

Title:
  Keystone should handle ldap.SIZELIMIT_EXCEEDED error

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  With ldap as identity backend server configured to keystone, GET
  users/groups API is abruptly failing in below stacktrace without
  proper error handling when ldap search results(users/groups) count is
  more than default sizelimit configured on ldap server.

  The size limit is of course as configured at the LDAP server and the
  configuration is beyond the control of OpenStack/keystone. However,
  keystone should have better error handling in this ldap flow so that
  such errors return an appropriate message. (Full stack trace can be
  found in the attachment)

  result = func(*args,**kwargs)
  2017-08-04 11:44:46.368 102104 ERROR keystone.common.wsgi SIZELIMIT_EXCEEDED: {'desc': u'Size limit exceeded'}

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1712415/+subscriptions