openldap 2.4.25 is better, but still has the LDAP_SIZELIMIT_EXCEEDED bug.A possible fix is to add a call to limits_check() in sssvlv_op_search() (sssvlv.c) : --- sssvlv.c 2011-03-24 02:04:28.000000000 +0000+++ sssvlv.c.new 2011-06-16 18:07:36.000000000 +0100@@ -839,6 +839,7 @@ sess_id = find_session_by_context( si->svi_max_percon, op->o_conn->c_conn_idx, vc ? vc->vc_context : NO_VC_CONTEXT, ps ? ps->ps_cookie : NO_PS_COOKIE ); if ( sess_id >= 0 ) { so = sort_conns[op->o_conn->c_conn_idx][sess_id];+ limits_check( op, rs ); /* Is it a continuation of a VLV search? */ if ( !vc || so->so_vlv <= SLAP_CONTROL_IGNORED || vc->vc_context != so->so_vcontext ) {