Community Articles

Find and share helpful community-sourced technical articles.
Labels (1)

Question: We added the following settings to our knox topology so that knox may search in ldap for the groups that a user is in, so that we can efficiently control knox permissions with ranger.

<!-- changes needed for group sync--> 

Our search base and attribute settings are the same as those we have in our config, and for ranger. But in knox we get an error in the gateway.log (attached) complaining about the size of the results.

Normally the results are paginated, but it seems like knox is trying to get all of them at once. What do we need to change to make this work?

ERROR: Knox was searching in OU which has 3000 groups.

Below was setup -

1. Env has KNOX = AD integration in place

2. Env currently have 3000+ groups in AD and current limit for a search, without pagination, is 500.

3. User has Ranger -Knox plugin enabled.

4. User level policy for knox -ranger plugin works whereas it does not works if groups are specified in policy.


This is a BUG - and is Fixed in Knox 0.10 version.

RESOLUTION: Adding below property resolved the issue -


@Sagar Shimpi

Probably worth pointing out that this will be fixed in Knox 0.10 by the looks of it: KNOX-644

Done. Thanks

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.
Version history
Last update:
‎12-22-2016 07:31 AM
Updated by:
Top Kudoed Authors