Ldap phonebook doesn't respect the sizeLimit request parameter

nethesis / dev

Nethesis issue tracker

http://www.nethesis.it

4 stars 1 forks source link

Ldap phonebook doesn't respect the sizeLimit request parameter #6034

Closed Stell0 closed 3 years ago

Stell0 commented 3 years ago

LDAP has a sizeLimit parameter that define the maximum number of entries of the response. The phonebook doesn't respect this parameter, that is exposed by the library but not yet automatically enforced: "sizeLimit The number of entries to return. Defaults to '0' (unlimited). ldapjs doesn't currently automatically enforce this, but probably will at some point." http://ldapjs.org/server.html

Stell0 commented 3 years ago

Test case:

[ ] configure "max entries" on phones, the number of returned contacts should never exceed the maximum configured
[ ] use -z option to set size limit with ldapsearch ldapsearch -w PASSWORD -D 'cn=ldapuser,dc=phonebook,dc=nh' -b 'dc=phonebook,dc=nh' -H ldaps://HOST:10636 -z SIZELIMIT

nethbot commented 3 years ago

in 7.9.2009/nethesis-testing:

nethserver-phonebook-mysql-2.3.3-1.2.g20f4410.ns7.noarch.rpm x86_64

nethbot commented 3 years ago

in 7.9.2009/nethesis-updates:

nethserver-phonebook-mysql-2.3.4-1.ns7.noarch.rpm x86_64