Hi all,
I can not apply a limits directive to my slapd.conf. I need a user
(cn=replicator,ou=AppUsers,dc=company,dc=net) to have read access to all
entries of a database.
The global sizelimits ( 1000) seems to override any other database
directive. Each ldapsearch returns a " 4 Size limit exceeded".
openldap version : 2.4.42
here is a sample of my slapd.conf
...
# Define global ACLs to disable default read access.
sizelimit 1000
timelimit 5
tool-threads 8
pidfile /usr/local/var/run/slapd.pid
argsfile /usr/local/var/run/slapd.args
#######################################################################
# database definitions
#######################################################################
#########################################
# Directories DATABASE
#########################################
database mdb
suffix "ou=Directories,dc=company,dc=net"
subordinate
checkpoint 1024 5
dbnosync
maxsize 10737418240
envflags writemap
rootdn "cn=admin,dc=company,dc=net"
# Mode 700 recommended.
directory /var/lib/openldap/ldap
# acl
authz-regexp uid=([^,]*),cn=digest-md5,cn=auth
ldap:///ou=company,dc=company,dc=net??sub?(&(objectclass=psnDirectoryContact)(cli=sipdefault:$1))
access to *
by dn.exact="cn=replicator,ou=AppUsers,dc=company,dc=net" write
by * break
...........
access to dn.sub="ou=AppUsers,dc=company,dc=net" attrs=userpassword
by anonymous auth
by * none
# Indices to maintain
index cn,dc,sn,uid,mail,telephoneNumber pres,eq,sub
index arecord,description eq
index
objectClass,macAddress,custID,locationID,zoneGroupPrefix,entryUUID,entryCSN
pres,eq
# Sync Repl
overlay syncprov
# all standard entries in the accesslog that were successful
syncrepl rid=0
provider=ldap://
bindmethod=simple
binddn="cn=user,ou=login,cn=system"
credentials=secret
searchbase="ou=Directories,dc=company,dc=net"
logbase="cn=accesslog_directories"
logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
schemachecking=on
type=refreshAndPersist
retry="60 +"
syncdata=accesslog
#limits
limits dn.exact="cn=replicator,ou=AppUsers,dc=company,dc=net"
size=unlimited time=unlimited
....
thanks in advance.
