LDAP: size limit and time limit in search
Some important LDAP result codes that could result from issuing a search to the directory server. The non-zero result codes except for 10 refer to either an error, or some limit being exceeded. The result codes that are not errors are prophylactic in nature: they prevent LDAP clients from monopolizing Directory Server resources. Administrators must never allow clients to request large numbers of entries or use unlimited amounts of server time processing a request without the client have mad special arrangements. Modern professional-quality directory servers like the UnboundID Directory Server support assigning connection and request resource limits on a per-client and per distinguished name basis.
