Error: ldap_search(): Partial search results returned: Sizelimit exceeded

[misilot]

Version v7.1.16 - build 16564 (master)

When trying to ingest ~1500 users I get this error.

 Error: ldap_search(): Partial search results returned: Sizelimit exceeded 

When I run php artisan snipeit:ldap-sync --summary -vvv from the CLI nothing gets returned either, no errors or anything.

The test ldap synchronization button works and returns data.

Thank you!

[misilot]

Sorry, it looks like the error never pasted. Will update the description

 Error: ldap_search(): Partial search results returned: Sizelimit exceeded 

[misilot]

I was able to get more errors from the CLI by setting LOG_LEVEL=debug

[2025-02-25 09:51:08] production.DEBUG: LDAP search executed successfully.
[2025-02-25 09:51:08] production.DEBUG: okay, at least one more page to go!!!
[2025-02-25 09:51:08] production.DEBUG: Total count is: 500
[2025-02-25 09:51:08] production.INFO: ErrorException: ldap_search(): Partial search results returned: Sizelimit exceeded in /var/www/html/app/Models/Ldap.php:323
Stack trace:
#0 /var/www/html/vendor/laravel/framework/src/Illuminate/Foundation/Bootstrap/HandleExceptions.php(255): Illuminate\Foundation\Bootstrap\HandleExceptions->handleError()
#1 [internal function]: Illuminate\Foundation\Bootstrap\HandleExceptions->Illuminate\Foundation\Bootstrap\{closure}()
#2 /var/www/html/app/Models/Ldap.php(323): ldap_search()
#3 /var/www/html/app/Console/Commands/LdapSync.php(128): App\Models\Ldap::findLdapUsers()
#4 /var/www/html/vendor/laravel/framework/src/Illuminate/Container/BoundMethod.php(36): App\Console\Commands\LdapSync->handle()
#5 /var/www/html/vendor/laravel/framework/src/Illuminate/Container/Util.php(41): Illuminate\Container\BoundMethod::Illuminate\Container\{closure}()
#6 /var/www/html/vendor/laravel/framework/src/Illuminate/Container/BoundMethod.php(93): Illuminate\Container\Util::unwrapIfClosure()
#7 /var/www/html/vendor/laravel/framework/src/Illuminate/Container/BoundMethod.php(37): Illuminate\Container\BoundMethod::callBoundMethod()
#8 /var/www/html/vendor/laravel/framework/src/Illuminate/Container/Container.php(662): Illuminate\Container\BoundMethod::call()
#9 /var/www/html/vendor/laravel/framework/src/Illuminate/Console/Command.php(211): Illuminate\Container\Container->call()
#10 /var/www/html/vendor/symfony/console/Command/Command.php(326): Illuminate\Console\Command->execute()
#11 /var/www/html/vendor/laravel/framework/src/Illuminate/Console/Command.php(181): Symfony\Component\Console\Command\Command->run()
#12 /var/www/html/vendor/symfony/console/Application.php(1096): Illuminate\Console\Command->run()
#13 /var/www/html/vendor/symfony/console/Application.php(324): Symfony\Component\Console\Application->doRunCommand()
#14 /var/www/html/vendor/symfony/console/Application.php(175): Symfony\Component\Console\Application->doRun()
#15 /var/www/html/vendor/laravel/framework/src/Illuminate/Foundation/Console/Kernel.php(201): Symfony\Component\Console\Application->run()
#16 /var/www/html/artisan(35): Illuminate\Foundation\Console\Kernel->handle()
#17 {main}

[uberbrady]

There are some LDAP providers that you have to ask them to enable paging on your LDAP server, that might be what's needed here? We by default ask for 500 entries 'per page' and then can page our way through the results - I've seen some customers syncing 25,000 or more users that way, so it should definitely be fine on 1500-ish (should be 3 full pages and a partial page for the last one). It could be worth it to talk to your directory provider and see if they have anything to say about paging and maximum result sizes.

[misilot]

Thanks, I am checking as pagination does appear to work if I lower it from 500 to 50, it will loop through until it gets to 500 records, and than hits wall.

[snipe]

@misilot Just checking in, any progress? (Trying to clean up older issues.)

[misilot]

Nope we are still hitting this issue. We think it might be an LDAP server configuration set to stop data exfiltration, but we are still waiting on our upstream team to determine if that is the case or not.

[snipe]

Just wanted to check and see if you ever got this resolved? If so, can you please close the ticket? If not, can you update us on what version of Snipe-IT you're currently using, so we can see if it's still an issue on latest?

:) Thanks!