libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

KEYCLOAK-19036 Avoid infinite loop during LDAP sync with OpenLDAP and olcSizeLimit

Browse source 
Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
This commit is contained in:
Thomas Darimont 2021-08-11 17:09:13 +02:00 committed by Marek Posolda
parent 418d1e3471
commit f9b4e47851
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
federation/ldap/src/main/java/org/keycloak/storage/ldap/idm/store/ldap/LDAPOperationManager.java
View file

@ -320,6 +320,14 @@ public class LDAPOperationManager {
identityQuery.getPaginationContext().setCookie(cookie);
}
}
} else {
/*
* This ensures that PaginationContext#hasNextPage() will return false if we don't get ResponseControls back
* from the LDAP query response. This helps to avoid an infinite loop in org.keycloak.storage.ldap.LDAPUtils.loadAllLDAPObjects
* See KEYCLOAK-19036
*/
identityQuery.getPaginationContext().setCookie(null);
logger.warnf("Did not receive response controls for paginated query using DN [%s], filter [%s]. Did you hit a query result size limit?", baseDN, filter);
}
return result;