Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-688

FE requests 'all user names', which will fail for AD having a default cap of 1000 users maximum

XMLWordPrintable

      Whilst modifying LDAP Authentication Settings, I updated a field and saved. It tried to read all users which resulted in a stack. The ldap auth settings code that does user retrievals should batch user retrieval (start with a* b*, if the error recurrs go to aa* ab* etc)

      WARN - LDAP: could not list users using sAMAccountName=* on dc=dolby,dc=net (authenticated)
      javax.naming.SizeLimitExceededException: [LDAP: error code 4 - Sizelimit Exceeded]; remaining name 'dc=dolby,dc=net'
      at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3057)
      at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
      at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2758)
      at com.sun.jndi.ldap.LdapNamingEnumeration.getNextBatch(LdapNamingEnumeration.java:129)
      at com.sun.jndi.ldap.LdapNamingEnumeration.hasMoreImpl(LdapNamingEnumeration.java:198)
      at com.sun.jndi.ldap.LdapNamingEnumeration.hasMore(LdapNamingEnumeration.java:171)
      at com.cenqua.fisheye.user.ldap.LDAPAuth.getAllUserNames(LDAPAuth.java:335)
      at com.cenqua.fisheye.user.UserManager.resyncAuth(UserManager.java:455)
      at com.cenqua.fisheye.user.AuthSynchroniser$1.run(AuthSynchroniser.java:44)
      at java.util.TimerThread.mainLoop(Timer.java:512)
      at java.util.TimerThread.run(Timer.java:462)

      Workarounds

      1. Raise the result size limit on the AD server itself.
      2. Consider using Atlassian's user management tool, Crowd or, if you use JIRA connected to LDAP, consider using JIRA for User Management.

              lpater Lukasz Pater
              7e4b704f-7dbd-4908-9f12-a7a2e312c6c0 Deleted Account (Inactive)
              Votes:
              26 Vote for this issue
              Watchers:
              19 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - Not Specified
                  Not Specified
                  Logged:
                  Time Spent - 37m
                  37m