Community Articles
Find and share helpful community-sourced technical articles.
Check out our newest addition to the community, the Cloudera Innovation Accelerator group hub.
Labels (1)

Question: We added the following settings to our knox topology so that knox may search in ldap for the groups that a user is in, so that we can efficiently control knox permissions with ranger.

<!-- changes needed for group sync--> 

Our search base and attribute settings are the same as those we have in our config, and for ranger. But in knox we get an error in the gateway.log (attached) complaining about the size of the results.

Normally the results are paginated, but it seems like knox is trying to get all of them at once. What do we need to change to make this work?

ERROR: Knox was searching in OU which has 3000 groups.

Below was setup -

1. Env has KNOX = AD integration in place

2. Env currently have 3000+ groups in AD and current limit for a search, without pagination, is 500.

3. User has Ranger -Knox plugin enabled.

4. User level policy for knox -ranger plugin works whereas it does not works if groups are specified in policy.


This is a BUG - and is Fixed in Knox 0.10 version.

RESOLUTION: Adding below property resolved the issue -


@Sagar Shimpi

Probably worth pointing out that this will be fixed in Knox 0.10 by the looks of it: KNOX-644

Done. Thanks

Don't have an account?
Version history
Last update:
‎12-22-2016 07:31 AM
Updated by:
Top Kudoed Authors