Trying to explore and correlate an endpoint returns the error: Search failed: Administrative limit exceeded
search cancel

Trying to explore and correlate an endpoint returns the error: Search failed: Administrative limit exceeded

book

Article ID: 54691

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite

Issue/Introduction

When trying to explore an endpoint that has a very large amount of objects, a limit will be reached and the following error returned:

ETA_E_0257<EAC>, Error listing LDAP Account objects: DB [ldaps://<SERVER>:<PORT>] Search failed: Administrative limit exceeded

Environment

Release:
Component: Directory + Identity Manager

Resolution

These limits are set in a .dxc file on your Admin server. You can set these to be unlimited by following these steps:

  1. Open the file %DXHOME%\config\limits\  or $DXHOME/config/limits and edit the .dxc that the DSA is sourcing. 
    (It's always good practice to create a backup of the file).

  2. Make the following changes:(0=Unlimited)

    set credits = 1024;
    set max-op-size = 0;
    set bind-idle-time = 0;
    set max-op-time = 0;

  3. Save the file and close

  4. From a command prompt, type 'dxserver init <SERVERNAME>' (without quotes)

 

For Virtual Appliance environment, you need to use the dsa account to edit the file, run the command "su - dsa"