On Sun, 2016-08-21 at 12:15 +0000, Frank Rosquin wrote:

Hi,

when I try to link the rancher.com to my 389ds for authentication, I get the following log entry:

[20/Aug/2016:14:42:02 +0000] connection - conn=160 fd=64 Incoming BER Element was 3 bytes, max allowable is 2097152 bytes. Change the nsslapd-maxbersize attribute in cn=config to increase.

whatever I set nsslapd-maxbersize to, I always get that log entry.

I am using 389-Directory/1.3.2.16 B2014.098.2147 on Ubuntu 14.04

That function is:

log_ber_too_big_error()

Which means that something else may be erroneously calling it during some other error condition.

What operation were you performing when the error was encountered? That will help us narrow down where this could be coming from.

Something else that may help is a tcpdump -w 'output.pcap' so we can see the actual ldap traffic going into the server at the time.

Thanks,