[Fedora-directory-devel] Administrative limit exceeded with no results returned

[Graham Leggett]

Hi all,

I am having some sudden bizarre behaviour from fedora-ds-1.1.2-1.fc6.

The following query, logged in as a specific user created for our 
mailserver, has suddenly since this morning returned the error 
"Administrative limit exceeded":

'(&(associatedDomain=imausa.net)(!(associatedDomain=rachel.example.com)))'

When the exact same query is made using the Directory Manager, it 
returns zero records returned, which is correct (no entries exist in the 
directory called imausa.net).

According to the documentation for the error message "Administrative 
limit exceeded", this error will be thrown when more than by default 
1000 rows are returned during a query by a user other than the Directory 
Manager.

When I last looked though, zero records was well less than 1000, and I 
am completely stumped.

Trying a domain that is hosted in this server, the query returns one 
single record, as expected, as the Directory Manager user.

Trying the same query as the specific user created for our mailserver, 
we again get "Administrative limit exceeded".

Has anybody encountered and error like this before?

In answer to "what's changed recently", the number of records in the 
LDAP server was increased from just over 1000 records to around 7000 
records, although I cannot be sure if this is related. The records have 
nothing whatsoever to do with the objects being queried by our 
mailserver in this case.

Regards,
Graham
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3287 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-devel/attachments/20080925/5d30f064/attachment.bin