Disabling Server-Side Sort for Identity Manager Directory Searches

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

This article provides instructions for disabling the Server-Side Sort (SSS) option within Identity Manager directory searches. This modification is typically required when SSS controls interfere with directory search queries, leading to errors such as "No results" when searching by criteria (e.g., last name), while unique queries (like OID) return results as expected.

Environment

Identity Manager

 

Cause

The issue occurs when the LDAP directory environment erroneously triggers server-side sort controls during directory searches. This interference causes the LDAP server to fail to return expected search results for broader query filters.

Resolution

To disable the server-side sort option, you must modify the directory.xml configuration file associated with your user store.

1. Locate Configuration: Navigate to the Identity Manager directory configuration files and locate the directory.xml file.
2. Edit Directory Configuration: Open the directory.xml file in a text editor.
3. Disable Server-Side Sort: Locate the search parameter settings and configure the application to ignore server-side sort controls as required by your LDAP environment.
4. Verify Maxrows Parameter: Ensure the maxrows parameter is correctly set. This parameter specifies the maximum number of objects that Identity Manager can return. If the number of objects exceeds this limit, an error is displayed.
   • Note: When conflicting settings apply, the LDAP server uses the lowest setting. Setting a value for maxrows helps override LDAP directory limits where appropriate.
5. Save and Restart: Save the changes to directory.xml and restart the Identity Manager services to apply the new configuration.

Additional Information

For detailed documentation on search parameters and configuration, please refer to the official Directory Search Parameters