[lsc-changes] [Ldap Synchronization...] page changed: documentation:howto:activedirectory

[webmaster]

A page in your DokuWiki was added or changed. Here are the details:

Date : 2014/05/16 16:49
Browser : Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:29.0) Gecko/20100101 Firefox/29.0
IP-Address : 88.173.78.196
Hostname : mne69-10-88-173-78-196.fbx.proxad.net
Old Revision: http://lsc-project.org/wiki/documentation/howto/activedirectory?rev=1393948459
New Revision: http://lsc-project.org/wiki/documentation/howto/activedirectory
Edit Summary:
User : coudot

@@ -17,17 +17,19 @@
<pageSize>1000</pageSize>
</connection>
</code>

- ===== Multi valued attributes size limit =====
+ ===== Multi valued attributes size limit (range) =====

Active Directory limits the maximum number of values returned by a ldap search for multi-valued attribute. As an example, AD use Group objects which contains the multi-valued attribute member.

- By default this limit in AD 2008 R2 is fixed to 1500 values.
+ By default this limit in AD 2008 R2 is fixed to 1500 values. This limit is also called range.

- If we have groups with more than 1500 members LSC could faild to correctly synchronize these groups.
+ If we have groups with more than 1500 members LSC could fail to correctly synchronize these groups.

This limit is configurable in Active Directory (Windows 2008/2008 R2) using this [[ http://support.microsoft.com/kb/2009267|KB]]
+
+ You can use some javascript code to get all values, see [[adrangescript]].

===== Filter to find user objects =====

Active Directory defines a **user** objectClass, which is used to represent user accounts.