LDAP config - Exceed Size Limit - MS Active Directory
-
Have an issue with configuring LDAP. I have downloaded the recent release 1.2.17 and unable to retrieve results from LDAP where we have more than 1000 objects in an OU.
Our environment runs on rhel 5.9 and interested in binding to Microsoft Active Directory. When I configure a test to bind to an OU with a small number of objects, I can successfully retrieve the objects and write them to the db.
[DEBUG] LDAPConnection::initLDAP(): Connecting to LDAP server
[DEBUG] LDAPConnection::syncUsers(): Found entry count: 48
[DEBUG] LDAPConnection::syncUsers(): Found dn: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
[DEBUG] LDAPConnection::syncUsers(): Found dn: xxxxxxxxxxxxxxxxxxxx
[DEBUG] LDAPConnection::syncUsers(): User added: xxxxxxxxxxxxxxxxxxxxxxxxxxxxHowever when I attempt to set the search scope to one of our larger OU and read in those objects, I receive an error Size Limit Exceed.
[DEBUG] LDAPConnection::syncUsers(): LDAP could not get search results. Error code: Size limit exceededAnyone have any suggestions or advice in reading and writing more than 1000 objects from an OU?
I have tried the below configuration along with many others with no luck.(&(objectClass=*)(sizelimit=0)) or (&(objectClass=*)(sizelimit="none"))
Appreciate any input
-
Hi,
I'm not using NetXMS with ldap, but i think that you need check your servers (AD) MaxPageSize parameter.
Win2003/2008 MaxPageSize default value is 1000.MaxPageSize value controls the maximum number of objects that are returned in a single search result, independent of how large each returned object is. To perform a search where the result might exceed this number of objects, the client must specify the paged search control. This is to group the returned results in groups that are no larger than the MaxPageSize value. To summarize, MaxPageSize controls the number of objects that are returned in a single search result.
Windows 2000 and Windows Server 2003 LDAP administration limits
http://support2.microsoft.com/kb/315071Windows Server 2008 and newer domain controller returns only 5000 values in a LDAP response
http://support2.microsoft.com/kb/2009267LDAP policies
http://technet.microsoft.com/en-us/library/cc770976.aspxRgs
TM -
Yes, this is AD LDAP page size limit. Next release of NetXMS will support LDAP paging so you'll be able to synchronize larger amount of users without increasing page size on AD LDAP server.
Best regards,
Victor
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login