In many searches throughout the IPA system, ldap2.find_entries and ldap2.get_entries searches are limited with size_limit from the IPA configuration.

However, many of such searches rely on fact that the search that they are doing is unlimited, which is not at all true (the default records found limit is 100). This may cause that the changes that are meant for all entries of a given type are done only partially (in big deployments).