search

graylog-labs / graylog2-web-interface

[DEPRECATED]
https://www.graylog.org/
611 stars 174 forks source link

LDAP group mapping missing entries due to truncated LDAP queries #1711

Open p0zer opened 8 years ago

p0zer commented 8 years ago

LDAP group mapping missing entries due to truncated queries

In popular LDAP implementations such as Active Directory, it's possible that LDAP Groups are missing from the mapping page due to the results exceeding limits. Also, no additional criteria can be provided in the LDAP search, so there is currently no easy way around this issue. When capturing the query run and providing it to ldapsearch, the following is returned:

search result

search: 2 result: 4 Size limit exceeded

numResponses: 1001

numEntries: 1000

Nothing in the Web UI indicates that the result is truncated, so the intermittent responses can be difficult to track down.

vlardn commented 7 years ago

Any news about this issue? Please at least just display a message at the end of group list about such truncation.