Le 03/02/15 22:07, Stefan Seelmann a écrit : > I forgot to mention the performance aspect. > > If you traverse all persons from the CEO down you need as many LDAP > search operations as you have persons in the directory, each require a > full network roundtrip, which takes time.
What's the point of doing that when a ONE_LEVEL search done one level below would provide all the entries with one single Search ? > However if possible I'd avoid such a costly tree traversal, and instead > use e.g. paged search. Actually, it's probably better to abandon the request when you get what you want, paged search will just mitigate the memory used on the client side.