You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "Manfred Baedke (JIRA)" <ji...@apache.org> on 2016/03/16 18:05:33 UTC

[jira] [Commented] (OAK-4005) LdapIdentityProvider.getEntries() is prone to OOME.

    [ https://issues.apache.org/jira/browse/OAK-4005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15197685#comment-15197685 ] 

Manfred Baedke commented on OAK-4005:
-------------------------------------

Fixed in trunk: r1735267.

> LdapIdentityProvider.getEntries() is prone to OOME.
> ---------------------------------------------------
>
>                 Key: OAK-4005
>                 URL: https://issues.apache.org/jira/browse/OAK-4005
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: auth-ldap
>    Affects Versions: 1.2.11, 1.3.15, 1.0.27
>            Reporter: Manfred Baedke
>            Assignee: Manfred Baedke
>            Priority: Minor
>
> The public methods LdapIdentityProvider.listUsers() and LdapIdentityProvider.listGroups() both call LdapIdentityProvider.getEntries(...), which tries to collect all matching results from the backend in one LinkedList. Since typical LDAP directories are quite huge, this will usually yield an OutOfMemoryError.
> We'd need a cursor with connection handling here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)