Koozali.org: home of the SME Server

LDAP shows only 500 entries - is this limitation configurable by any parameter?

Offline larieu

  • *****
  • 214
  • +0/-0
if you have over 500 users on sme server 8.x
and set up the Thunderbird as on wiki
if you put "@" in search only first 500 users are shown ( in user ID order - first 500 on server)
but if you search for a specific user with user ID bigger than the first 500 you are able to see it but not in the first search
(it seems ok)


I have the following request

to put a NAS (Synology) authenticate users by LDAP
the first 500 users (in user ID order) are ok
but the trouble appear for the ones which are over
they are not able to use shared folders and you are not able to see them into LDAP client of synology
I expect that synology tries to cache all of them and hit the 500 initial barrier

is any parameter which can be modified into template-custom or by command? 
Code: [Select]
config setprop ldap ...


« Last Edit: April 09, 2014, 09:14:40 AM by larieu »
if everybody's life around you is better, probably yours will be better
just try to improve their life

Offline larieu

  • *****
  • 214
  • +0/-0
found on /var/log an error

Quote
op=1 SEARCH RESULT tag=101 err=4 nentries=500 text=

and in ldap conf is not set any limit

Quote
#------------------------------------------------------------
#          !!DO NOT MODIFY THIS FILE!!
#
# Manual changes will be lost when this file is ranegenerated.
#
# Please read the developer's guide, which is available
# at http://www.contribs.org/development/
#
# Copyright (C) 1999-2006 Mitel Networks Corporation
#------------------------------------------------------------
#
# LDAP Defaults
#

# See ldap.conf(5) for details
# This file should be world readable.

#BASE   dc=OpenLDAP, dc=Org
#HOST   ldap.openldap.org

#HOST   ldap.openldap.org ldap-master.openldap.org:666
#PORT   389

BASE dc=autototal,dc=ro
HOST localhost
PORT 389

#SIZELIMIT   12
#TIMELIMIT   15
#DEREF      neve

probably changing the
/etc/e-smith/templates-cusotm/etc/openldap/ldap.conf/20ldap-default

with another SIZELIMIT is the correct approach
or with SIZELIMIT = -1

anybody can confirm this?

if everybody's life around you is better, probably yours will be better
just try to improve their life