Horizon cannot display >1.5K users from LDAP

[Paul Karikh]

If Keystone is set up with LDAP and there is a lot of users (look like 1500 users if an the threshold value), Horizon can't fetch all users from domain and shows error "Error: Unable to retrieve user list."
There is no issues if number of users in LDAP is much smaller.
Also fetching 1K users from LDAP takes too long time (in comparsion with MySQL).
Affected pages:
identity/users
identity/domains (cannot list domain members)

[David Lyle (david-lyle)]

There is no reason to list all 1K users. Any place where the user is choosing from a large number of users, there should be a filter box to perform server side API filtering to reduce the number of results. A bug to insure that behavior is in place in all locations of the UI where needed is a more appropriate bug.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/250869

[SeanBoran (sean-boran)]

I just came across this limitation.

By setting the following one can limit the number of users shown (see also https://bugs.launchpad.net/keystone/+bug/1501698 which shows the commit earlier this year to include that feature)
[identity]
list_limit = 50

So now when one goes to horizon/identity/domains/ in the browser and then selects “manage members” from the dropdown for the LDAP domain, a list of 50 users pops up (and there are no errors such as SIZELIMIT_EXCEEDED).

The problem: One can see 50 users and search for a user within that list, however one cannot search for others users .
Domain Groups have the same limitation.

To me it looks like support for LDAP paging needs to be added e.g. http://jeftek.com/219/avoid-changing-the-maxpagesize-ldap-query-policy

[Lucas H. Xu (xuh-2)]

Hey Paul, are you still working on this?

[OpenStack Infra (hudson-openstack)]

Change abandoned by Rob Cresswell (<email address hidden>) on branch: master
Review: https://review.openstack.org/250869
Reason: Due to inactivity and merge conflict