Bug 54786

Summary: Include server side sort overlay in LDAP config
Product: UCS Reporter: Ingo Steuwer <steuwer>
Component: LDAPAssignee: Florian Best <best>
Status: RESOLVED MOVED QA Contact: UCS maintainers <ucs-maintainers>
Severity: enhancement    
Priority: P5 CC: best, damrose, hahn, rb, requate, troeder
Version: UCS 5.0   
Target Milestone: ---   
Hardware: Other   
OS: Linux   
URL: https://git.knut.univention.de/univention/ucs/-/merge_requests/399
See Also: https://forge.univention.org/bugzilla/show_bug.cgi?id=50240
https://forge.univention.org/bugzilla/show_bug.cgi?id=49666
What kind of report is it?: Feature Request What type of bug is this?: ---
Who will be affected by this bug?: --- How will those affected feel about the bug?: ---
User Pain: Enterprise Customer affected?:
School Customer affected?: ISV affected?:
Waiting Support: Flags outvoted (downgraded) after PO Review:
Ticket number: Bug group (optional):
Max CVSS v3 score:
Bug Depends on:    
Bug Blocks: 50240    

Description Ingo Steuwer univentionstaff 2022-05-23 08:49:54 CEST
We should include slapo-sssvlv to allow server side sort, This comes handy in large environments where page results should be used but output is send to user interfaces in a reasonable way.

https://www.openldap.org/software/man.cgi?query=slapo-sssvlv&apropos=0&sektion=0&manpath=OpenLDAP+2.4-Release&format=html%3E
Comment 1 Philipp Hahn univentionstaff 2022-05-23 09:33:06 CEST
UMC already does the sorting itself.

Have you done an impact analysis on the performance? To quote from <man:slapo-sssvlv(5)>:
> Since a complete result set must be generated in memory before sorting can be performed, processing sort requests can have a large impact on the server's memory use.

A such it may be used for DoS.

Also: please help development and provide more details, especially who requested this (ticket#, epic) and where does this request rank compared to all other bugs: <https://forge.univention.org/bugzilla/buglist.cgi?component=LDAP&product=UCS&resolution=--->
Comment 2 Florian Best univentionstaff 2022-05-23 09:45:03 CEST
Patch including UCR variable descriptions in: https://git.knut.univention.de/univention/ucs/-/merge_requests/399

We need this as well for the UDM REST API (Bug #50240). Client code already exists in the UDM REST API.