site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On 30.10.2006, at 18:37, Paul Nelson wrote: Thanks, Martin See http://www.ietf.org/rfc/rfc2696.txt Paul Nelson Thursby Software Systems, Inc. Hi, I'm have problems getting all users from in an Active Directory Domain using Directory Services. We have a test domain with about 65000 users. When trying to get the list of users only exactly 1000 are returned. Same with computers. This also happens when using the dscl tool (dscl localhost -list "Active Directory/All Domains/Computers") I can get all AD users when I use a Windows machine and run some VB scripts. So the AD controller is working correctly. Is the any secret setting that I need to turn on to get all users? Thanks, Martin This email sent to nelson@thursby.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... Apple's AD plug-in does not implement the LDAP paged results control. As a result, you only get the first 1000 records. Does anyone know of a work around for this problem, beside switching to AdmitMac (which is definitely an option). Thursby's ADmitMac product does implement paged results in their AD plug-in: http://www.thursby.com on 10/30/06 11:27 AM, Martin Bestmann at martin@poleposition-sw.com wrote: _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/nelson% 40thursby.com This email sent to site_archiver@lists.apple.com