There's a difference between the two:

"sizelimit" is DSA-wide; "limits" are per-database and per "who" clause. This is reflected in the man page by the respective location of the statements in the "GLOBAL CONFIGURATION OPTIONS" and in the "GENERAL DATABASE OPTIONS".

Of course, if "sizelimit" overrides a "limits" for a client identity matching the "who" clause of that "limits" on a search spanning the database the "limits" was defined for, then it's a bug.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------