Our search base and attribute settings are the same as those we have in our hadoop.security.ldap.group.mapping config, and for ranger. But in knox we get an error in the gateway.log (attached) complaining about the size of the results.
Normally the results are paginated, but it seems like knox is trying to get all of them at once. What do we need to change to make this work?
ERROR: Knox was searching in OUwhich has 3000 groups.
Below was setup -
1. Env has KNOX = AD integration in place
2. Env currently have 3000+ groups in AD and current limit for a search, without pagination, is 500.
3. User has Ranger -Knox plugin enabled.
4. User level policy for knox -ranger plugin works whereas it does not works if groups are specified in policy.