Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users



You can write your own LDAP code to query AD instead of using the plug-in.
Then implement the page controls - it is not very difficult.  It sounds like
you are writing some kind of code anyway.

on 10/30/06 2:59 PM, Martin Bestmann at email@hidden wrote:

> 
> On 30.10.2006, at 18:37, Paul Nelson wrote:
> 
>> Apple's AD plug-in does not implement the LDAP paged results
>> control.  As a
>> result, you only get the first 1000 records.
>> 
> 
> Does anyone know of a work around for this problem, beside switching
> to AdmitMac (which is definitely an option).
> 
> Thanks,
> 
> Martin
> 
>> See http://www.ietf.org/rfc/rfc2696.txt
>> 
>> Thursby's ADmitMac product does implement paged results in their AD
>> plug-in:
>> http://www.thursby.com
>> 
>> Paul Nelson
>> Thursby Software Systems, Inc.
>> 
>> 
>> 
>> 
>> on 10/30/06 11:27 AM, Martin Bestmann at email@hidden
>> wrote:
>> 
>>> Hi,
>>> 
>>> I'm have problems getting all users from in an Active Directory
>>> Domain using Directory Services. We have a test domain with about
>>> 65000 users. When trying to get the list of users only exactly 1000
>>> are returned. Same with computers.
>>> This also happens when using the dscl tool (dscl localhost -list
>>> "Active Directory/All Domains/Computers")
>>> I can get all AD users when I use a Windows machine and run some VB
>>> scripts. So the AD controller is working correctly.
>>> 
>>> Is the any secret setting that I need to turn on to get all users?
>>> 
>>> Thanks,
>>> 
>>> Martin
>>> 
>>>  _______________________________________________
>>> Do not post admin requests to the list. They will be ignored.
>>> Darwin-dev mailing list      (email@hidden)
>>> Help/Unsubscribe/Update your Subscription:
>>> http://lists.apple.com/mailman/options/darwin-dev/nelson%
>>> 40thursby.com
>>> 
>>> This email sent to email@hidden
>>> 
>> 
>> 
> 
> 


 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-dev/email@hidden

This email sent to email@hidden

References: 
 >Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users (From: Martin Bestmann <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.