[Freeipa-devel] [PATCH] 156 Create pkey-only option for find commands

Endi Sukma Dewata edewata at redhat.com
Wed Oct 26 18:32:21 UTC 2011


On 10/26/2011 1:21 PM, Martin Kosek wrote:
>>> For huge installations there is no way we can do unbound queries. There
>>> will always be some limit on the number of entries returned, searched, etc.
>>
>> Yes, but the search limit using paged results needs to be reasonably
>> bigger than the standard 100 entries, enough to be used in most deployments.
>
> Btw. this is just our arbitrary limit. The default value is 100, but it
> can be modified via ipa config-mod --searchrecordslimit=INT. You can
> also use --sizelimit and --timelimit parameters for most of *-find
> commands to control the limits.
>
> I tried:
> ipa user-find --pkey-only --sizelimit=0
>
> and it returned all 300 records in 5.4 seconds.

I think we probably need 2 different size limits: one for regular 
queries (set on LDAP server) and the other for pulling primary keys 
(maintained by IPA server).

Suppose we have a system with 5000 users, we need to be able to pull all 
5000 primary keys. But for regular queries we probably still want to 
keep a smaller limit.

-- 
Endi S. Dewata




More information about the Freeipa-devel mailing list