RE: [ActiveDir] Exceeding the LDAP Look Through Limit

[Eric Fleischman]

I could probably tell you which admin limit you’re exceeding if you tell me the OS version & service pack level.   Most admin limits are there to protect perf of the box & prevent against DoS attacks. Better than changing the limits would be to change the query to use LDAP RFC compliant ways to performing the action w/o changing lmits. For example, if the limit is # of objects returned per page, rather than using a huge page you’d do a paged search.   So the questions that would be of interest: 1)       OS and service pack level 2)       What is the action being performed (as an example, if this is a search, baseDN + scope + filter)   Thanks! ~Eric     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Brashear Sent: Thursday, July 22, 2004 10:40 AM To: [EMAIL PROTECTED] Subject: [ActiveDir] Exceeding the LDAP Look Through Limit   I have a customer who has created an OU and populated it with objects that have many attributes.  He is now encountering this error:   "[LDAP: error code 11 - 00002024: SvcErr: DSID-02050AA0, problem 5008 (ADMIN _LIMIT_EXCEEDED), data -1026 ]; remaining name 'cn=CN\=JPRAKASH\,CN\=Computers\,DC\=jupiter\,DC\=lan,ou=S ubscriptions,dc=jupiter,dc=lan'"   Is there a maximum size limitation for user defined objects in AD? Can that value be modified? Where would one modify it?  Would it be in the LDAP policies/protocols configuration?   TIA! Steve