[OAK-4005] LdapIdentityProvider.getEntries() is prone to OOME.

• Type: Improvement
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.0.27, 1.2.11, 1.3.15, 1.4.0
• Fix Version/s: 1.2.19, 1.4.7, 1.6.0
• Component/s: auth-ldap
• Assignee: Manfred Baedke
• Reporter: Manfred Baedke
• Created: 11/Feb/16 14:40
• Updated: 04/Aug/17 09:39
• Resolved: 16/Mar/16 17:06

Description

The public methods LdapIdentityProvider.listUsers() and LdapIdentityProvider.listGroups() both call LdapIdentityProvider.getEntries(...), which tries to collect all matching results from the backend in one LinkedList. Since typical LDAP directories are quite huge, this will usually yield an OutOfMemoryError.
We'd need a cursor with connection handling here.

Issue Links

• blocks: OAK-4678 Backport OAK-4344 and OAK-4005
• relates to: OAK-4679 Backport OAK-4119, OAK-4101, OAK-4087 and OAK-4344