Trying to explore and correlate an endpoint returns the error: Search failed: Administrative limit exceeded

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Identity Suite

Issue/Introduction

When trying to explore an endpoint that has a very large amount of objects, a limit will be reached and the following error returned:

ETA_E_0257<EAC>, Error listing LDAP Account objects: DB [ldaps://<SERVER>:<PORT>] Search failed: Administrative limit exceeded

Environment

Release:
Component: Directory + Identity Manager

Resolution

These limits are set in a .dxc file on your Admin server. You can set these to be unlimited by following these steps:

1. Open the file %DXHOME%\config\limits\  or $DXHOME/config/limits and edit the .dxc that the DSA is sourcing. 
   (It's always good practice to create a backup of the file).
   
   
2. Make the following changes:(0=Unlimited)
   
   set credits = 1024;
   set max-op-size = 0;
   set bind-idle-time = 0;
   set max-op-time = 0;
   
   
3. Save the file and close
   
   
4. From a command prompt, type 'dxserver init <SERVERNAME>' (without quotes)

 

For Virtual Appliance environment, you need to use the dsa account to edit the file, run the command "su - dsa"