Bug 41248 – group_members_sync_to_ucs: Size limit exceeded

Bug 41248 - group_members_sync_to_ucs: Size limit exceeded


Summary:	group_members_sync_to_ucs: Size limit exceeded

Status:	CLOSED FIXED

Product:	UCS
Classification:	Unclassified
Component:	AD Connector
Version:	UCS 4.1
Hardware:	Other Linux

Importance:	P3 normal (vote)
Target Milestone:	UCS 4.1-3-errata
Assigned To:	Arvid Requate
QA Contact:	Stefan Gohmann

URL:
Keywords:

Duplicates:	29854 (view as bug list)
Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2016-05-10 19:16 CEST by Arvid Requate
Modified:	2016-09-21 20:12 CEST (History)
CC List:	4 users (show)

See Also:	41744
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.091
Enterprise Customer affected?:	Yes
School Customer affected?:	Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:	2016042621000438
Bug group (optional):	Error handling
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2016-05-10 19:16:48 CEST

At Ticket #2016042621000438 we had the case where the sync of a large group ("Domain Users school1") from AD back to UCS failed:

=======================================================================
    10.05.2016 18:40:29,255 LDAP        (PROCESS): sync to ucs:   [         group] [    modify] cn=domain users school1,cn=groups,ou=school1,"$connector_ad_ldap_base"
    10.05.2016 18:40:29,904 LDAP        (ERROR  ): failed in post_con_modify_functions
    10.05.2016 18:40:29,905 LDAP        (ERROR  ): Traceback (most recent call last):
      File "/usr/lib/pymodules/python2.7/univention/connector/__init__.py", line 1309, in sync_to_ucs
        f(self, property_type, object)
      File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 166, in group_members_sync_to_ucs
        return connector.group_members_sync_to_ucs(key, object)
      File "/usr/lib/pymodules/python2.7/univention/connector/ad/__init__.py", line 1765, in group_members_sync_to_ucs
        timeout=-1, sizelimit=0))
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 918, in search_ext_s
        return self._apply_method_s(SimpleLDAPObject.search_ext_s,*args,**kwargs)
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 860, in _apply_method_s
        return func(self,*args,**kwargs)
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 553, in search_ext_s
        return self.result(msgid,all=1,timeout=timeout)[1]
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 465, in result
        resp_type, resp_data, resp_msgid = self.result2(msgid,all,timeout)
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 469, in result2
        resp_type, resp_data, resp_msgid, resp_ctrls = self.result3(msgid,all,timeout)
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 476, in result3
        resp_ctrl_classes=resp_ctrl_classes
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 483, in result4
        ldap_result = self._ldap_call(self._l.result4,msgid,all,timeout,add_ctrls,add_intermediates,add_extop)
      File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 106, in _ldap_call
        result = func(*args,**kwargs)
    SIZELIMIT_EXCEEDED: {'desc': 'Size limit exceeded'}
=======================================================================

I guess we need paging at this point.

Comment 1 Michel Smidt 2016-05-10 21:49:35 CEST

Just for your information.
Customer confirmed that after he increased the MaxPageSize on the AD the rejects are gone.

Comment 2 Stefan Gohmann

2016-05-10 21:53:28 CEST

(In reply to Michel Smidt from comment #1)
> Just for your information.
> Customer confirmed that after he increased the MaxPageSize on the AD the
> rejects are gone.

OK, thanks.

Comment 3 Stefan Gohmann

2016-05-10 21:54:38 CEST

*** Bug 29854 has been marked as a duplicate of this bug. ***

Comment 4 Arvid Requate

2016-08-16 22:41:15 CEST

Fixed along with Bug #41744.

Advisory: univention-ad-connector.yaml

Comment 5 Stefan Gohmann

2016-08-18 07:56:36 CEST

Code review: OK

Tests: OK

Jenkins tests: OK

YAML: OK

Comment 6 Janek Walkenhorst

2016-08-18 15:15:33 CEST

<http://errata.software-univention.de/ucs/4.1/237.html>