There are problems with schema for some resources (notably AD) being too big, taking up too much memory.
"The root problem is, that "generationConstraints" is a midPoint concept. ConnId framework does not know about it. Therefore the connector has to download a complete LDAP schema. What makes it even worse is that the ConnId framework does not have any proper mechanism to share data between connector instances. Therefore each connector instance has to keep the schema separately. This may be also combined in changes in Apache Directory API that might also increase the memory consumption for the schema. Systematic solution to this problem will need changes to ConnId framework."