Bug 54786 - Include server side sort overlay in LDAP config
Include server side sort overlay in LDAP config
Status: RESOLVED MOVED
Product: UCS
Classification: Unclassified
Component: LDAP
UCS 5.0
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: Florian Best
UCS maintainers
https://git.knut.univention.de/univen...
:
Depends on:
Blocks: 50240
  Show dependency treegraph
 
Reported: 2022-05-23 08:49 CEST by Ingo Steuwer
Modified: 2022-11-10 09:45 CET (History)
6 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ingo Steuwer univentionstaff 2022-05-23 08:49:54 CEST
We should include slapo-sssvlv to allow server side sort, This comes handy in large environments where page results should be used but output is send to user interfaces in a reasonable way.

https://www.openldap.org/software/man.cgi?query=slapo-sssvlv&apropos=0&sektion=0&manpath=OpenLDAP+2.4-Release&format=html%3E
Comment 1 Philipp Hahn univentionstaff 2022-05-23 09:33:06 CEST
UMC already does the sorting itself.

Have you done an impact analysis on the performance? To quote from <man:slapo-sssvlv(5)>:
> Since a complete result set must be generated in memory before sorting can be performed, processing sort requests can have a large impact on the server's memory use.

A such it may be used for DoS.

Also: please help development and provide more details, especially who requested this (ticket#, epic) and where does this request rank compared to all other bugs: <https://forge.univention.org/bugzilla/buglist.cgi?component=LDAP&product=UCS&resolution=--->
Comment 2 Florian Best univentionstaff 2022-05-23 09:45:03 CEST
Patch including UCR variable descriptions in: https://git.knut.univention.de/univention/ucs/-/merge_requests/399

We need this as well for the UDM REST API (Bug #50240). Client code already exists in the UDM REST API.