Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
- Subject: Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
- From: Paul Nelson <email@hidden>
- Date: Mon, 30 Oct 2006 11:37:31 -0600
- Thread-topic: Directory Services only returns 1000 users from Active Directory/All Domains/Users
Apple's AD plug-in does not implement the LDAP paged results control. As a
result, you only get the first 1000 records.
See http://www.ietf.org/rfc/rfc2696.txt
Thursby's ADmitMac product does implement paged results in their AD plug-in:
http://www.thursby.com
Paul Nelson
Thursby Software Systems, Inc.
on 10/30/06 11:27 AM, Martin Bestmann at email@hidden wrote:
> Hi,
>
> I'm have problems getting all users from in an Active Directory
> Domain using Directory Services. We have a test domain with about
> 65000 users. When trying to get the list of users only exactly 1000
> are returned. Same with computers.
> This also happens when using the dscl tool (dscl localhost -list
> "Active Directory/All Domains/Computers")
> I can get all AD users when I use a Windows machine and run some VB
> scripts. So the AD controller is working correctly.
>
> Is the any secret setting that I need to turn on to get all users?
>
> Thanks,
>
> Martin
>
> _______________________________________________
> Do not post admin requests to the list. They will be ignored.
> Darwin-dev mailing list (email@hidden)
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden