[Date Prev][Date Next]
Re: ldapsearch against AD for large groups (>1000 members)
Aren't you confusing paged results with the range attribute description?
>From: Dave Snoopy <email@example.com>
>Subject: Re: ldapsearch against AD for large groups (>1000 members)
>To: firstname.lastname@example.org, Antti Tikkanen <email@example.com>
>Date: Mon, 8 Jul 2002 09:52:06 -0700 (PDT)
>I posted to the newsgroup about this same issue a
>couple of weeks ago. The 1,000 entires is a maximum
>page size that AD will send in responses. It can be
>changed if you have admin access on your PDC.
>Better yet though, you can look at the code for the
>program "net" which comes with Samba 3.0 Alpha 17. It
>includes a working example of how to do a "paged"
>query against AD, and thus request the remainder of
>the results. The name of the function which does it is
>--- Michael_Ströder <firstname.lastname@example.org> wrote:
>> Antti Tikkanen wrote:
>> > I am not sure if this is an OpenLDAP thing or an
>> AD thing.
>> Don't know the details about AD but I guess it's not
>> an OpenLDAP
>> issue since I used OpenLDAP client in a test to
>> query a group
>> entry with 200000 member values from Netscape DS
>> > When I use
>> > ldapsearch to get the members of an AD group with
>> more than 1000 members,
>> > I only receive the first 1000:
>> > # ldapsearch -LL '(cn=testgroup)'
>> > --clip--
>> > dn: CN=testgroup,<...>
>> > member;range=0-999:CN=test999,<...>
>> > member;range=0-999:CN=test998,<...>
>> > member;range=0-999:CN=test997,<...>
>> Seems playing with the ;range sub-type when
>> explicitly requesting
>> attributes might be interesting...
>> But why do you want to retrieve all members? In most
>> this does not scale very well anyway.
>> Ciao, Michael.
>Do You Yahoo!?
>Sign up for SBC Yahoo! Dial - First Month Free
Luke Howard | lukehoward.com
PADL Software | www.padl.com