[LDAP: error code 11 - Administrative Limit Exceeded]

Question

Hi,
I am trying to search LDAP and retrieve a attribute (checksecurity) based on the uid (hardcoded the uid), below is the code :
<invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
<s>person</s>
<s>Resource_LDAP</s>
<map>
<s>searchScope</s>
<s>ou=people,o=abc.com</s>
<s>searchAttrsToGet</s>
<List>
<String>checksecurity</String>
<String>uid</String>
</List>
<s>conditions</s>
<map>
<s>uid</s>
<s>AE8024T</s>
</map>
</map>
</invoke>
Below is the block trace :
<block name='Test' trace='true'>
<invoke name='getResourceObjects' class='com.waveset.ui.FormUtil'>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref> --> com.waveset.workflow.WorkflowEngine@539f0d
</invoke> --> com.waveset.server.InternalSession@17210a5
<s>person</s> --> person
<s>Resource_LDAP</s> --> Resource_LDAP
<map>
<s>searchScope</s> --> searchScope
<s>ou=people,o=abc.com</s> --> ou=people,o=abc.com
<s>searchAttrsToGet</s> --> searchAttrsToGet
<o>[checksecurity, uid]</o> --> [checksecurity, uid]
<s>conditions</s> --> conditions
<map>
<s>uid</s> --> uid
<s>AE8024T</s> --> 210014992
</map> --> {uid=AE8024T}
</map> --> {searchAttrsToGet=[checksecurity, uid], searchScope=ou=people,o=abc.com, conditions={uid=AE8024T}}XPRESS <invoke> exception:com.waveset.util.WavesetException: Can't call method getResourceObjects on class com.waveset.ui.FormUtil
==> com.waveset.util.WavesetException: Error searching for objects
==> javax.naming.LimitExceededException: [LDAP: error code 11 - Administrative Limit Exceeded]
Please let me know if anyone has come across this error.
Thanks & Regards
Arun

Answer 1

Your LDAP server has search limits for the user you're logging in as (or, more likely, it has default limits, and you haven't made exceptions for that user).
If you're using Sun Directory Server, you can remove these limits by setting 'nsLookThroughLimit' and 'nsSizeLimit' both to -1 for that user.