Bug 41647

Summary: It is not possible to set global limits in the slapd.conf via UCR-Variable
Product: UCS Reporter: Michel Smidt <michelsmidt>
Component: LDAPAssignee: Felix Botner <botner>
Status: CLOSED DUPLICATE QA Contact: Stefan Gohmann <gohmann>
Severity: normal    
Priority: P5 CC: gohmann
Version: UCS 3.2   
Target Milestone: UCS 4.1-3-errata   
Hardware: Other   
OS: Linux   
What kind of report is it?: --- What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional): Forked for project
Max CVSS v3 score:

Description Michel Smidt 2016-06-23 10:52:28 CEST 
It should be possible to create global limits in the configuration (slapd.conf) by setting UCR variables.
e.g.
limits group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,o=ZZ" size.soft=2000 size.hard=5000 size.unchecked=100000 time.soft=10 time.hard=30
limits dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited
limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=unlimited time=unlimited
limits users size.soft=50 size.hard=500 size.unchecked=10000 time.soft=5 time.hard=25 size.pr=50 size.prtotal=10000
Comment 1 Michel Smidt 2016-06-23 10:53:07 CEST 
*** Bug 41433 has been marked as a duplicate of this bug. ***
Comment 2 Felix Botner univentionstaff 2016-08-22 18:23:40 CEST 
If this is enough

-> ucr set ldap/limits='group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,o=ZZ" size.soft=2000 size.hard=5000;dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited;limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=unlimited time=unlimited;users time.soft=-1 time.hard=-1' ...

-> more /etc/ldap/slapd.conf| grep limit

limits group/univentionGroup/uniqueMember="cn=Domain Admins,cn=groups,o=XY,...
limits dn.exact="cn=admin,o=XY,o=ZZ" size=unlimited time=unlimited
limits limits dn.onelevel="cn=dc,cn=computers,o=XY,o=ZZ" size=un...
limits users time.soft=-1 time.hard=-1

than this is a duplicate of 34873

*** This bug has been marked as a duplicate of bug 34873 ***
Comment 3 Stefan Gohmann univentionstaff 2016-09-07 06:30:23 CEST 
OK
Comment 4 Stefan Gohmann univentionstaff 2016-09-09 14:04:13 CEST 
OK, closed