Administrative Limit Exceeded - DSCC Entry Management Tab

DS 6.3.1
When performing searches in the DSCC under the Entry Management tab I am getting an error that says Administrative Limit Exceeded. I know this is being caused by the global searchlimit and/or lookthroughlimt settings. I can set those to unlimited to resolve the issue but I don't want to open those values up to all users. I also know that I can set these same limits on a per entry basis by adding the nssizelimit and nslookthroughlimit attributes with -1 values to the particular user's entry.
In the DSCC however, the user that is binding to my DS instance and performing the searches is: cn=admin,cn=Administrators,cn=dscc
This user exists in the DSCC registry, not my DS instance. I assume it can BIND to my DS instance via the Pass Through Authentication plugin. I have tried setting both the nssizelimt and nslookthroughlimit attributes to -1 in that user's entry in the DSCC registry but it doesn't work like it does when I set those to an entry that exists in my DS instance. I'm guessing the Pass Through Authentication plugin doesn't look for those attributes and/or doesn't return them to my DS instance.
Is there a way to set the sizelimit and lookthrough limits for "cn=admin,cn=Administrators,cn=dscc" so I don't get the error in the DSCC and where I don't have to open up those limits globally? Is there a best practice for this other than telling me that the Entry Management tab is not the best place to be doing such tasks? I'm aware of that but this is actually for a customer who desires to use the Entry Management section to search for and periodically manage his entries.
Thanks in advance.

The behaviour you're observing is documented in a bug. Unfortunately it's not implemented since the 5.2 days and not targeted for 7.0 either. You could create a local admin user and assign rights, or use a tool like "Apache Directory Studio" and log in as directory manager.
4534340 reslimit should provide interface for chaining and PTA plugin

Similar Messages

Need Help with "ldap_search: Administrative limit exceeded" issue

Hi,
I recently created an index for an attribute called abcSmDisableFlag. When i perform an Ldapsearch using an application owners binddn, 10 entires are returned before i get the error: ldap_search: Administrative limit exceeded. When I use the Directory Manager I do not get this error while the same 10 entries are returned.
I have analyzed the error and access logs and i think the problem is with the index (notes=U). I performed a reindex on the attribute but it din't work.
Below are the details i gathered from
error log:
[20/Sep/2010:15:04:59 -0400] - WARNING<20805> - Backend Database - conn=1189378 op=1 msgId=2 - search is not indexed base='ou=customers,o=abc
enterprises,c=us,dc=abc,dc=net' filter='(&(objectClass=abcIdentity)(abcIdmDeleteDate<=2010-09-20)(!(abcSmDisabledFlag=1)))' scope='sub'
access log:
[20/Sep/2010:15:04:59 -0400] conn=1189378 op=-1 msgId=-1 - fd=536 slot=536 LDAP connection from UserIP to ServerIP
[20/Sep/2010:15:04:59 -0400] conn=1189378 op=0 msgId=1 - BIND dn="cn=xyzservices,ou=appid,dc=abc,dc=net" method=128 version=3
[20/Sep/2010:15:04:59 -0400] conn=1189378 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0.001190 dn="cn=xyzservices,ou=appid,dc=abc,dc=net"
[20/Sep/2010:15:04:59 -0400] conn=1189378 op=1 msgId=2 - SRCH base="ou=customers,o=abc enterprises,c=us,dc=abc,dc=net" scope=2 filter="(&
(objectClass=abcIdentity)(abcIdmDeleteDate<=2010-09-20)(!(abcSmDisabledFlag=1)))" attrs=ALL
[20/Sep/2010:15:05:03 -0400] conn=1189378 op=1 msgId=2 - RESULT err=11 tag=101 nentries=1 etime=4.604440 notes=U
I have indexed both abcIdmDeleteDate and abcSmDisabledFlag with a presence and equality index.
I am using Sun Directory Server 6.2. All the nsslapd limits are at Default value and I am not supposed to increase those values.
I will be very grateful if anyone can kindly share ideas/solutions on this issue and help me out.
Thanks!!

I don't know if your issue has been resolved but two things i see here:
1 - you should not be on 6.2, move to 6.3 or 7.
2 - your filter is the answer, when you use a filter of "(&(objectclass=abcIdentity)(abcIdmDeleteDate<=2010-09-16)("\!"(abcSmDisabledFlag=1)))", DSEE takes the 1st part of your filter, in your case objectclass=abcIdentity, and does a search on it. Then after retrieving all entries it checks all that have an abcSmDisableFlag <=2010-09-16 and finally out of the remaining entries it will check which do not have an abcSmDisableFlag=1.
The search on objectClass is resulting in an unindexed search, apparently. What you need to do is alter the order of your attributes in your search filter and have objectClass at the end.
I hope this makes sense and helps.

Administrative limit exceeded error

On attempting an ldap search command as follows ./ldapsearch -z1000 -b "ou=People,o=abcd.com" "organizationalstatus=manager", I am getting "Administrative limit exceeded" error. The limit is set to 2000 in the console. any help is appreciated. Thanks

hello,
"Administrative limit " may be a SIZE limit , ENTRIES ( number of ) limit or SIZE ( output of ) limit:
From "man" of ldapsearch:
-l timelim time limit (in seconds) for search (default is no limit)
-z sizelim size limit (in entries) for search (default is no limit)
You can use these options when you search.
You may also check the setting of 3 limits above with Admin Console:
Open your directory server (name), Configuration Folder, Performance. On right panel check Client Control folder. You may see:
Size limit
Look-through limit
Time limit
Idle timeout
� The look-through limit specifies the maximum number of entries that will be examined for a search operation.
� The size limit specifies the maximum number of entries the server returns to the client application in response to a search operation.
� The time limit specifies the maximum time the server spends processing a search operation.
� The idle timeout specifies the time a client connection to the server can be idle before the server drops the connection.
If you bind as Directory manager, you may use unlimited resources by default.
Hello,
silvio

Error opening file/URL reference by alias and Administrative limit exceeded

Hello All,
Problem:
SMTP Error: 4.5.0 error opening file/URL reference by alias
and
Search failed with: netscape.ldap.LDAPException: error result (11); Administrative limit exceeded
Here is my configuration:
Windows 2000 server (without Active Directory)
SP4
Iplanet Messaging Server 5.2
Netscape Directory Server 4.16
IPlanet Messaging Server 5.2 Hotfix 1.09 (built Jan 7 2003)
We have a group which we use to flash messages to all the users of the mail server. Till last week it was working fine but now I am not able to send messages to this group <group-name>.
There are around 800 (Eight Hundred) E-mail id the messaging server and the flashed message is supposed to go to all 800 + users.
Note: I have another group of 300 users and I am able to send an E-mail to this group of 300 users.
I am using Dynamic Group for Members list.
The error message I get while trying to send message to this group is
SMTP Error: 4.5.0 error opening file/URL reference by alias.
The corresponding error in mail.log file is
30-Jan-2004 10:55:21.40 41c.7e4.1098 tcp_intranet J 0 <group-name>@domain rfc822; <group-name>@domain domain (localhost [127.0.0.1]) 452 4.5.0 error opening file/URL referenced by alias: <group-name>@domain
Now when I construct and Test the LDAP URL from Console, the error I get is:
Search failed with: netscape.ldap.LDAPException: error result (11); Administrative limit exceeded
I have increased the various limits but I still get the same error when I send mail to that group or do a LDAP Test:
The deafult and new limits are:
Sizelimit: Default 2000 New 10000
Timelimit Default 3600 New 3600
Lookthroughlimit Default 5000 New 6000
The corresponding error entry in access log of slapd is:
30/Jan/2004:12:19:26 +051800] conn=34 op=213 RESULT err=11 tag=101 nentries=0 etime=2 notes=U
My search for Administrative limit problem and error opening file/URL error in Sun forum and other groups did get some hits but that did not solve my problem.
I will appreciate any suggestion/comments.
Thanks and Regards,
Maneesh Bisht

Thanks Jay.
My problem has been fixed.
Your suggestion was to increase the lookthrough limit. As you would have noticed in my posting that I had increased this limit to 6000 but that did not solve my problem. Today I increased this limit to 10000. And after that I did not get "administrative limit exceeded" error. Also I do not get "error opening file/URL reference by alias" error while sending E-mail to a particular group of 800+ ids.
Regards,
Maneesh Bisht

Ldap_search: Administrative limit exceeded

Hi I am running a number of DSCC 11.1.1.3.0 LDAP instances
within those instances I have configured the 'size limit' to unlimited (and restarted the server)
when an authenticated user does an ldapsearch they get the full search returned but when an anonymous users does the same search
they hit the 'Administrative limit exceeded' error.
what am I missing that would allow an anonymous user to return the full search?
Thanks in Advance.

I assume you are connecting direct to a Directory Server and not via a Directory Proxy instance.
Have you checked if your bound users have any of the the following operational attributes set on them?
nssizelimit
nsTimeLimit
nsLookThroughLimit
Also take a look at the error code in the logs, it may be that your search is failing due to time or indexes rather than size of result.

ODSEE 11gR1------LDAP: error code 11 - Administrative Limit Exceeded

Hello,
We are facing some issues browsing the server content when using some accounts.
We've got the error code below:
Caused by: javax.naming.LimitExceededException: [LDAP: error code 11 - Administrative Limit Exceeded]; remaining name 'ou=Users,o=XXX"
We've already tried to solve it using the below posts:
http://docs.oracle.com/cd/E19693-01/819-0995/bcapq/index.html
http://docs.oracle.com/cd/E19424-01/820-4809/gbxdp/index.html
But the problem still occurs.
Do you have any idea how to solve it?
Thank you in advance for your help.

Hello,
These are some logs while using the application and the LDAP server.
06 mai 2013 09:52:55,375 DEBUG rte_log: - LDAP search filter is '(&(objectClass=rteFOCustomers)(cn=*)(displayName=*)(iso6523=*))'
06 mai 2013 09:52:55,375 INFO rte_log: - Recherche de sociétés avec le filtre '(&(objectClass=rteFOCustomers)(cn=*)(displayName=*)(iso6523=*))'
06 mai 2013 09:52:55,491 INFO rte_log: - La recherche de sociétés avec le filtre '(&(objectClass=rteFOCustomers)(cn=*)(displayName=*)(iso6523=*))' a ramené : 925 elements
06 mai 2013 09:53:02,954 ERROR rte_log: etso - [LDAP: error code 11 - Administrative Limit Exceeded]
The account used to browse the server is the directory manager account.
Thank you for your help.

Administrative Limit Exceeded

Here are 2 queries that I ran...
ldapsearch -h <hostname1> -p 389 -D uid=<id>,ou=people,ou=intranet,dc=<company>,dc=com -w <password> -b "ou=people,ou=intranet,dc=<company>,dc=com (member=uid=<uid>,ou=people,ou=intranet,dc=<company>,dc=com) cn
ldapsearch -h <hostname2> -p 389 -D uid=<id>,ou=people,ou=intranet,dc=<company>,dc=com -w <password> -b "ou=people,ou=intranet,dc=<company>,dc=com (member=uid=<uid>,ou=people,ou=intranet,dc=<company>,dc=com) cn
ldap_search: Administrative limit exceeded
One query returned 0 results, the other "Administrative limit exceeded". Looking at the properties of both directory servers, the look-through-limit and search-size-limit are exactly the same. And both of these servers replicate with one another. If it helps hostname2 is a true master, hostname1 was a promoted supplier to master.
What could be the reason why one search returns 0 results and the other "administrative limit exceeded"?

The first thing to do is compare the configured indexes on the two systems and make sure the second host is missing the needed equality index for member.
Assuming there is a missing index, you will need to configure the index as per the docs here -
http://docs.oracle.com/cd/E19656-01/821-1504/fwbrl/index.html
and then generate the index database as per here -
http://docs.oracle.com/cd/E19656-01/821-1504/gadse/index.html
Be careful only to generate the index you need. If you leave the index list empty, I think all of them get recreated. Reindexing puts the backend into readonly and can take a long time.

[LDAP: error code 11 - Administrative Limit Exceeded]

Hi,
I am trying to search LDAP and retrieve a attribute (checksecurity) based on the uid (hardcoded the uid), below is the code :
<invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
<s>person</s>
<s>Resource_LDAP</s>
<map>
<s>searchScope</s>
<s>ou=people,o=abc.com</s>
<s>searchAttrsToGet</s>
<List>
<String>checksecurity</String>
<String>uid</String>
</List>
<s>conditions</s>
<map>
<s>uid</s>
<s>AE8024T</s>
</map>
</map>
</invoke>
Below is the block trace :
<block name='Test' trace='true'>
<invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref> --> com.waveset.workflow.WorkflowEngine@539f0d
</invoke> --> com.waveset.server.InternalSession@17210a5
<s>person</s> --> person
<s>Resource_LDAP</s> --> Resource_LDAP
<map>
<s>searchScope</s> --> searchScope
<s>ou=people,o=abc.com</s> --> ou=people,o=abc.com
<s>searchAttrsToGet</s> --> searchAttrsToGet
<o>[checksecurity, uid]</o> --> [checksecurity, uid]
<s>conditions</s> --> conditions
<map>
<s>uid</s> --> uid
<s>AE8024T</s> --> 210014992
</map> --> {uid=AE8024T}
</map> --> {searchAttrsToGet=[checksecurity, uid], searchScope=ou=people,o=abc.com, conditions={uid=AE8024T}}XPRESS <invoke> exception:com.waveset.util.WavesetException: Can't call method getResourceObjects on class com.waveset.ui.FormUtil
==> com.waveset.util.WavesetException: Error searching for objects
==> javax.naming.LimitExceededException: [LDAP: error code 11 - Administrative Limit Exceeded]
Please let me know if anyone has come across this error.
Thanks & Regards
Arun

Your LDAP server has search limits for the user you're logging in as (or, more likely, it has default limits, and you haven't made exceptions for that user).
If you're using Sun Directory Server, you can remove these limits by setting 'nsLookThroughLimit' and 'nsSizeLimit' both to -1 for that user.

DSCC: Entry Management: Browse

Hi,
when i browse in my directory data i get lot of times the advice
Results Limit Exceeded
Only 1000 entries can be shown at one time. To reduce the number of items, change the View DN or modify the View Options below.
Is there a possibility to change this limit?
Thanks and regards,
Roland

Hi handat,
sorry, but this value is set to unlimited.
When i do a commandline search i get all entries, but not on the DSCC webpage.
Regards,
Roland

Administrative limit reached with -1 for all settings

Hello
I have the system set to -1 for max number of items and timeout and it is still saying limit exceeded, and it appears that it is returning all the items in the directory server. No dynamic groups are working now. Any help would be appreicated.
Thanks
Chris Toledo

Do you have the default value set to -1 for all of the following attributes?
nsslapd-sizelimit
nsslapd-timelimit
nsslapd-lookthroughlimit
nsslapd-idletimeout
If you're receiving "Administrative limit exceeded" errors (err=11), this is typically caused by exceeding the nsslapd-lookthroughlimit value (the maximum number of entries the server will look through for items matching your search criteria). This is different from nsslapd-sizelimit (the maximum number of entries the server will return to the client that match the search filter).
Also, be sure that your client application is not setting a more restrictive value for these items, and that the bind credential you are using doesn't have a more restrictive value for these attributes as well.

The administrative limit for this request was exceeded.

Hi,
Am getting below error while adding machine to domain
C:\>netdom join W2K12R2-DC-161 /domain:winvm.com /userd:Administrator /passwordd:cvm@123 /REBOOT
The administrative limit for this request was exceeded.
The command failed to complete successfully.
Even while trying to delete some entries from registry gives below error
ADSIEdit
Operation failed. Error code: 0x2024
The administrative limit for this request was exceeded.
00002024: SvcErr: DSID-0215030C, problem 5008 (ADMIN_LIMIT_EXCEEDED), data -1069
OK
Please help me urgently
I have searched on below links but could not get the correct workaround steps
https://social.technet.microsoft.com/Forums/windowsserver/en-US/83087f21-ba51-414d-9202-badea56ba83b/administrative-limit-was-exceeded
https://social.technet.microsoft.com/Forums/en-US/fea67c92-8dab-4711-8579-baaee4bca3f7/the-administrative-limit-for-this-request-was-exceeded?forum=identitylifecyclemanager
Nilesh Savant

Hi Nilesh,
Before going further, are we using domain admin account to use netdom and adsiedit.msc? Whether it is true or not, please try another admin account to check if the issue persists. Besides, to use netdom, we must run the
netdom command from an elevated command prompt. If the issue persists, please try to join the machine to the domain from the machine itself to see if it can be successful.
Best regards,
Frank Shen
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

OBI 11g Error : exceeds an entry's the maximum size soft limit 256

Hi All,
I am getting a Warning in EM as below:
Adding property Desc with value "+report description+". exceeds an entry's the maximum size soft limit 256. There are 333 bytes in this property for item /shared/folder/_portal/dashboardname
It happens only when, if we provide a long description text (>256 bytes) for a report in the 'Description' box while saving the report.
Do you have any ideas why it is happening and what can be done to remove this warning.
An parameter needs to be changed..??
Obi version 11.1.1.5.0
box : Unix

We tried that...
But most of the dashboards/reports have been migrated from 10g and the reports are being built by Users not Dev team, adding their own description to report.
I need to know ... if there is any parameter which can fix that...

Database error text.. "Resource limit exceeded. MSGID= Job=753531/IBPADM/WP05"

Hello All,
We are getting below runtime errors
Runtime Errors         DBIF_RSQL_SQL_ERROR
Exception              CX_SY_OPEN_SQL_DB
Short text
    SQL error in the database when accessing a table.
What can you do?
    Note which actions and input led to the error.
    For further help in handling the problem, contact your SAP administrator
    You can use the ABAP dump analysis transaction ST22 to view and manage
    termination messages, in particular for long term reference.
How to correct the error
    Database error text........: "Resource limit exceeded. MSGID= Job=753531/IBPADM/WP05""
   Internal call code.........: "[RSQL/OPEN/PRPS ]"
    Please check the entries in the system log (Transaction SM21).
    If the error occures in a non-modified SAP program, you may be able to
    find an interim solution in an SAP Note.
    If you have access to SAP Notes, carry out a search with the following
    keywords:
"DBIF_RSQL_SQL_ERROR" "CX_SY_OPEN_SQL_DB"
    "SAPLCATL2" or "LCATL2U17"
    "CATS_SELECT_PRPS"
    If you cannot solve the problem yourself and want to send an error
    notification to SAP, include the following information:
    1. The description of the current problem (short dump)
       To save the description, choose "System->List->Save->Local File
    (Unconverted)".
    2. Corresponding system log
       Display the system log by calling transaction SM21.
       Restrict the time interval to 10 minutes before and five minutes
after the short dump. Then choose "System->List->Save->Local File
(Unconverted)".
3. If the problem occurs in a problem of your own or a modified SAP
program: The source code of the program
    In the editor, choose "Utilities->More
Utilities->Upload/Download->Download".
4. Details about the conditions under which the error occurred or which
actions and input led to the error.
System environment
    SAP-Release 700
    Application server... "SAPIBP0"
    Network address...... "3.14.226.140"
    Operating system..... "OS400"
    Release.............. "7.1"
       Character length.... 16 Bits
    Pointer length....... 64 Bits
    Work process number.. 5
    Shortdump setting.... "full"
    Database server... "SAPIBP0"
    Database type..... "DB400"
    Database name..... "IBP"
    Database user ID.. "R3IBPDATA"
    Terminal................. "KRSNBRB032"
    Char.set.... "C"
    SAP kernel....... 721
    created (date)... "May 15 2013 01:29:20"
    create on........ "AIX 1 6 00CFADC14C00 (IBM i with OS400)"
    Database version. "DB4_71"
Patch level. 118
Patch text.. " "
Database............. "V7R1"
SAP database version. 721
Operating system..... "OS400 1 7"
Memory consumption
Roll.... 0
EM...... 12569376
Heap.... 0
Page.... 2351104
MM Used. 5210400
MM Free. 3166288
Information on where terminated
    Termination occurred in the ABAP program "SAPLCATL2" - in "CATS_SELECT_PRPS".
    The main program was "CATSSHOW ".
    In the source code you have the termination point in line 67
    of the (Include) program "LCATL2U17".
    The termination is caused because exception "CX_SY_OPEN_SQL_DB" occurred in
    procedure "CATS_SELECT_PRPS" "(FUNCTION)", but it was neither handled locally
     nor declared
    in the RAISING clause of its signature.
    The procedure is in program "SAPLCATL2 "; its source code begins in line
    1 of the (Include program "LCATL2U17 ".
The exception must either be prevented, caught within proedure
"CATS_SELECT_PRPS" "(FUNCTION)", or its possible occurrence must be declared in
the
RAISING clause of the procedure.
To prevent the exception, note the following:
SM21: Log
Database error -904 at PRE access to table PRPS
> Resource limit exceeded. MSGID= Job=871896/VGPADM/WP05
Run-time error "DBIF_RSQL_SQL_ERROR" occurred
Please help
Regards,
Usha

Hi Usha
Could you check this SAP Notes
1930962 - IBM i: Size restriction of database tables
1966949 - IBM i: Runtime error DBIF_DSQL2_SQL_ERROR in RSDB4UPD
BR
SS

Payment term in the sales order & credit limit exceed.

Dear Guru,
Problem 1:
1. In the sales order, there are 3 lines items. As per there requirement each line item they want enter diffrent payment term.
for example
        Material code                                              Payment terms
1.      Fixed                                                               z045
2.     Variable                                                           z030
3.    Pipes                                                                 z015
how you can archive this goal. In customer master payment term is maintained only one. Please suggest me.
Problem 2:
1. Credit managment, If the credit block is there in the sales order(Due to credit limit exceed) order confirmation is no goes to customer.
how we can archive this goal by using the standard functionality.

Hi,
1. You can achieve it through manual entries
If you have 3 line item then at item level >> Billing document maintain payment terms
2. If credit limit exceed then confirmation should not go to customer
Can you tell me currently how you sending confirmation to customers
If it is through simple mail then go to
IMG >> SD >> Basic functions >> Output control >> Output determination using condition techniques >> maintain out put determination for sales document >> maintain out put determination procedure
Select procedure V10000 >> go to control data
for condition type MAIL maintain requirement 9/11
(If this is not work then create new routine and add your logic that if credit limit exceeds then do not(trigger) send confirmation)
kapil

Max Character File Size Limit exceeded.The document is too large to process

Hi
I have made set on section on products in report.
the Reports contains around 50 products when im opening the report
in draft mode the following error is displayed
"Max Character File Size Limit exceeded.The document is too large to be proceesed by the server .Contact your business Objects Administrator."
can some body help me out how to increase my report character file size

Hi,
If you are using Business Objects XIR2, there is a performance parameter in the Web_Intelligence Report Server where you can increase the size of that file. The parameter is Maximun Character File Size. Go to the CMC>Server>server.Web_IntelligenceReportServer in the Properties tab you will see it.
Cheers,
Luigi

Administrative Limit Exceeded - DSCC Entry Management Tab

Similar Messages

Maybe you are looking for