Resolution:
Description:
------------------
What is the cause of following error message when trying to add a user within BusinessConnect User Management
"Number of matching entries exceeds the limit for searching from Domain. Please specify a more restrictive search pattern."

Environment
------------------

All platforms using LDAP for user access control

Resolution
-------------------

The exception is thrown because the pattern specified in searchUserNames() method retrieved results greater than the default value set for Domain Search Limit (10,000).

Note: [TRA 5.5.4 and below, docs state the default value is 1000. This has been corrected in TRA 5.6.0. You can refer following documentation under &ltTIBCO_Admin_Home>/&ltVersion#>/doc/pdf/tib_admin_usr.pdf, TIBCO Administrator Users Guide, Ch.3, Secton: Setting the maximum LDAP objects to return after a search]

You can override the default value by specifying "DomainUsersSearchLimit" property in AuthorizationDomain.properties i.e. is
* Edit &ltTRA_Home>/domain/&ltDomain_Name>/AuthorizationDomain.properties
* Add property
DomainUsersSearchLimit=&ltn> [Note: When &ltn> is set to 0 (zero), it means unlimited)]

As mentioned in the product documentation referenced above, client-side search limit is overridden by LDAP server search limit. Therefore, you have to also make corresponding setting on the LDAP server (e.g. sizelimit in Sun One Directory Server OR MaxPageSize in Active Directory).

Error: Number of matching entries exceeds the limit for searching from Domain. Please specify a more restrictive search pattern.