What does "WARN: Size limit exceeded" mean in my DSA's warn log?

Products

• CA Directory
• CA Security Command Center

Issue/Introduction

Sometimes you may notice that your warn log has "WARN : Size limit exceeded" warnings listed in it. This means that the max-op-size you have specified in your config file has been reached or the LDAP client specified the limit which is less than the number of entries being returned.

Environment

Directory

Resolution

You will notice these warnings under the following circumstances:

1. The 'WARN: Size limit exceeded" messages indicate that the number of entries returned as a result of anyone search has exceeded the max-op-size limit set in the DSA's config file.
   
   Example:
   You have set the max-op-size to 200 in your config file.
   You perform a search that returns 250 entries.
   Only 200 entries are sent back to the client and "WARN: Size limit exceeded" will be logged in the warn log.
   
   
2. When a client specifies the size limit which is less than the number of entries being returned.
   
   Example:
   You have set the max-op-size to 200 in your config file.
   You perform a search and specify the size limit from the client to 100 which returns 150 entries.
   Only 100 entries are sent back to the client and "WARN: Size limit exceeded" will be logged in the warn log.