Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
- Subject: Re: Directory Services only returns 1000 users from Active Directory/All Domains/Users
- From: Paul Nelson <email@hidden>
- Date: Mon, 30 Oct 2006 15:51:43 -0600
- Thread-topic: Directory Services only returns 1000 users from Active Directory/All Domains/Users
You can write your own LDAP code to query AD instead of using the plug-in.
Then implement the page controls - it is not very difficult. It sounds like
you are writing some kind of code anyway.
on 10/30/06 2:59 PM, Martin Bestmann at email@hidden wrote:
>
> On 30.10.2006, at 18:37, Paul Nelson wrote:
>
>> Apple's AD plug-in does not implement the LDAP paged results
>> control. As a
>> result, you only get the first 1000 records.
>>
>
> Does anyone know of a work around for this problem, beside switching
> to AdmitMac (which is definitely an option).
>
> Thanks,
>
> Martin
>
>> See http://www.ietf.org/rfc/rfc2696.txt
>>
>> Thursby's ADmitMac product does implement paged results in their AD
>> plug-in:
>> http://www.thursby.com
>>
>> Paul Nelson
>> Thursby Software Systems, Inc.
>>
>>
>>
>>
>> on 10/30/06 11:27 AM, Martin Bestmann at email@hidden
>> wrote:
>>
>>> Hi,
>>>
>>> I'm have problems getting all users from in an Active Directory
>>> Domain using Directory Services. We have a test domain with about
>>> 65000 users. When trying to get the list of users only exactly 1000
>>> are returned. Same with computers.
>>> This also happens when using the dscl tool (dscl localhost -list
>>> "Active Directory/All Domains/Computers")
>>> I can get all AD users when I use a Windows machine and run some VB
>>> scripts. So the AD controller is working correctly.
>>>
>>> Is the any secret setting that I need to turn on to get all users?
>>>
>>> Thanks,
>>>
>>> Martin
>>>
>>> _______________________________________________
>>> Do not post admin requests to the list. They will be ignored.
>>> Darwin-dev mailing list (email@hidden)
>>> Help/Unsubscribe/Update your Subscription:
>>> 40thursby.com
>>>
>>> This email sent to email@hidden
>>>
>>
>>
>
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden