You are viewing a plain text version of this content. The canonical link for it is here.

Posted to oak-issues@jackrabbit.apache.org by "angela (JIRA)" <ji...@apache.org> on 2016/02/11 16:32:18 UTC

[jira] [Commented] (OAK-4005) LdapIdentityProvider.getEntries() is prone to OOME.

    [ https://issues.apache.org/jira/browse/OAK-4005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15142889#comment-15142889 ] 

angela commented on OAK-4005:
-----------------------------

IMHO that's an improvement.

> LdapIdentityProvider.getEntries() is prone to OOME.
> ---------------------------------------------------
>
>                 Key: OAK-4005
>                 URL: https://issues.apache.org/jira/browse/OAK-4005
>             Project: Jackrabbit Oak
>          Issue Type: Improvement
>          Components: auth-ldap
>    Affects Versions: 1.2.11, 1.3.15, 1.0.27
>            Reporter: Manfred Baedke
>            Priority: Minor
>
> The public methods LdapIdentityProvider.listUsers() and LdapIdentityProvider.listGroups() both call LdapIdentityProvider.getEntries(...), which tries to collect all matching results from the backend in one LinkedList. Since typical LDAP directories are quite huge, this will usually yield an OutOfMemoryError.
> We'd need a cursor with connection handling here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)