[Freeipa-devel] [PATCH] 156 Create pkey-only option for find commands

[Rob Crittenden]

Endi Sukma Dewata wrote:
> On 10/26/2011 4:29 AM, Martin Kosek wrote:
>> New option --pkey-only is available for all LDAPSearch based classes
>> with primary key visible in the output. This option makes LDAPSearch
>> commands search for primary attribute only.
>>
>> This may be useful when manipulating large data sets. User can at
>> first retrieve all primary keys in a relatively small data package
>> and then run further commands with retrieved primary keys.
>>
>> https://fedorahosted.org/freeipa/ticket/1262
>
> The new option looks good, but it's still bound by the search size limit
> so it's not returning the complete set of primary keys. The UI needs to
> get the complete set in order to compute the pagination.
>
> To get the complete set the server probably needs to search the LDAP
> backend using simple paged results control. There's also a deferred
> ticket #81, but that's seems to be for supporting paged results in IPA's
> API.
>

For huge installations there is no way we can do unbound queries. There 
will always be some limit on the number of entries returned, searched, etc.

rob