Hi,

Ive tried,

dn: cn=default instance config,cn=config,cn=plugins

and,

dn: cn=default instance config,cn=config,cn=plugins,cn=config

and get no such  object (32)

regards

Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

________________________________________
From: Rob Crittenden [rcrit...@redhat.com]
Sent: Thursday, 25 October 2012 4:16 p.m.
To: Steven Jones
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] ipa user-find

Steven Jones wrote:
> Hi,
>
> How do I bind as the directory manager?  Ive tried and I cant figure out how.

Assuming you're running on the same host as IPA:

$ ldapmodify -x -D 'cn=directory manager' -W
dn: cn=default instance config,cn=chaining database,cn=plugins,cn=config
changetype: modify
replace: nsslapd-sizelimit
nsslapd-sizelimit: 8000

^D

And yes, that's an extra blank line after 8000.

> and how do I get the web ui to return all users so I can see if the winsync 
> is working , its a test bed so I need to do a side by side comparison....

You'll need to modify the size limit in the IPA configuration screen.
IPA Server -> Configuration -> Search size limit

rob

>
> regards
>
> Steven Jones
>
> Technical Specialist - Linux RHCE
>
> Victoria University, Wellington, NZ
>
> 0064 4 463 6272
>
> ________________________________________
> From: Rob Crittenden [rcrit...@redhat.com]
> Sent: Thursday, 25 October 2012 3:40 p.m.
> To: Steven Jones
> Cc: freeipa-users@redhat.com
> Subject: Re: [Freeipa-users] ipa user-find
>
> Steven Jones wrote:
>> When doing the above it only returns 2000, I have 6000
>>
>> How to get it to return 6000+?
>
> There are two size limits. One is a global limit in 389-ds-base,
> nsslapd-sizelimit which defaults to 2000.
>
> IPA has its own search limit which you can also set globally, or
> override it on the command line (which I'll do below).
>
> You'll need to bind as Directory Manager to change nsslapd-sizelimit
> then you can run:
>
> ipa user-find --sizelimit=8000
>
> I don't believe any services need to be restarted for this to take effect.
>
> We generally discourage enumerating all entries for performance reasons
> which is why by default the IPA size limit is 100.
>
> rob
>
>
>




_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to