OK, I might have found the setting: olcSizeLimit: size.prtotal=disabled Thank you On Thu, Aug 27, 2015 at 1:46 PM, Igor Shmukler <igor.shmukler(a)gmail.com&gt; wrote: > Hello, > > I am trying to make my client, developed for OpenLDAP also compatible > with Oracle DSEE. > Oracle DSEE is missing support for simple paged results, which I use. > Yet, ODSEE supports virtual list view with server-side sorting. I > adjusted my code, to use that - VLV+SSS as a fallback whenever the > server does not support paged results and supports VLV+SSS, like > ODSEE. > > Is it possible to disable OpenLDAP server-side support of simple paged > results control, so the OpenLDAP server would respond that this > control is unavailable? > > I don't have an LDAP proxy, nor ODSEE configured. OpenLDAP saved me > many times, in past. Can OpenLDAP be configured to do what I need, so > I could test my fallback code in the client using an OpenLDAP server? > > Thank you, > > Igor Shmukler

On Thu, 27 Aug 2015, Igor Shmukler wrote: > olcSizeLimit: size.prtotal=disabled > > What is wrong with the LDIF? It was successfully applied using > ldapmodify(1), yet my server still does not throw an unsupported > control, instead providing clients with paged results. You can see how prtotal=disabled is supposed to work with test025, e.g. $ ../clients/tools/ldapsearch -P 3 -x -S uid -b 'dc=example,dc=com' -h localhost -p 9011 -w secret -D 'cn=Paged Results Disabled User,ou=Paged Results Users,dc=example,dc=com' -E '!pr=5/noprompt' -b 'dc=example,dc=com' '(objectClass=*)' # extended LDIF # # LDAPv3 # base <dc=example,dc=com> with scope subtree # filter: (objectClass=*) # requesting: ALL # with pagedResults critical control: size=5 # # search result search: 2 result: 11 Administrative limit exceeded text: pagedResults control not allowed # numResponses: 1 so perhaps turn up your slapd logging and see if you're sending that result. And you mention "unsupported control," but these are administrative limits, it's not like this deletes the code from slapd. For example again with test025 and assuming you don't --enable-sssvlv=yes: $ ../clients/tools/ldapsearch -P 3 -x -S uid -b 'dc=example,dc=com' -h localhost -p 9011 -E '!sss=mail:caseIgnoreIA5Match' -b 'dc=example,dc=com' '(objectClass=*)' # extended LDIF # # LDAPv3 # base <dc=example,dc=com> with scope subtree # filter: (objectClass=*) # requesting: ALL # with server side sorting critical control # # search result search: 2 result: 12 Critical extension is unavailable text: critical extension is not recognized # numResponses: 1 Note that one practical, albeit somewhat evil, method to deal with confused clients can be to disallow them access to the supportedControl. # VLV, for instance access to dn.exact="" attrs=supportedControl val/objectIdentifierMatch.exact=2.16.840.1.113730.3.4.9 by <foolishClient> none

On Thu, 27 Aug 2015, Igor Shmukler wrote: > search: 4 > result: 0 Success obviously isn't >> result: 11 Administrative limit exceeded >> text: pagedResults control not allowed so yeah, that prtotal=disabled doesn't seem to hit. I'd turn up slapd logging and see what's going on. (Are you positive that your bindDN is subject to your prtotal clause?)