Thank you very much for this info, Kurt!
>From a practical and general perspective, what is the wise thing to do here:
1) return a partial result set, indicating {admin|time|size}LimitExceeded=true
or
2) return the LDAP error (3,4,11) with no results at all, suggesting
that the admin should change the limits instead?
At the moment I tend to favour the conservative approach, that is,
returning only complete result sets, but still allow web clients to
override that with an optional JSON parameter, e.g.
"allowPartialResultSets".
--
Vladimir Dzhuvinov :: software.dzhuvinov.com
