Re: ldapmodify failing with large attribute

Thanks Michael, that was quick and on the money. I missed that line in slapd.conf.

cheers, Geoff

On 15/12/2015 9:41 PM, Michael Ströder wrote:

Geoff Swan wrote:

...

I have a problem appearing where a large (16.6MB approx) value is to be saved to an attribute (certificateRevocationList). Prior to the value being this large, ldapmodify had no problems updating it. However it appears to have crossed some magic threshold where it will no longer be accepted, and aborts with: ldap_modify: Can't contact LDAP server (-1)

See slapd.conf(5):

sockbuf_max_incoming <integer>
    Specify the maximum incoming LDAP PDU size for
    anonymous sessions.  The default is 262143.

sockbuf_max_incoming_auth <integer>
    Specify the maximum incoming LDAP PDU size for authenticated sessions.
    The default is 4194303.

You probably want to increase sockbuf_max_incoming_auth to meet your needs.

Ciao, Michael.