Issue #254 has been updated by Frederic Soulier. % Done changed from 0 to 20
The goal of this patch is to provide ability in LSC to interract correctly witch specific LDAPV3 functionnality which allow LDAP server to add "option" in the returned attributename. This patch provide the ability to resolve the problem encountered with large multi valued attributes (more than 1000 by default) in Microsoft AD 2008 R2 environnements. For example, a AD group object can contain 5000 members which is represented by the specific "memberr" multivalued attributes which contains in this case 5000 values. Querying this group via LSC (more generally via LDAP) lead to obtain the following result: member;Range=0-999: cn=user,ou=people,dc=domain,dc=fr AD will return only the first 1000 values of the member attribute. In order to get all the values from the directory, the client must repeat the process querying the directory with ths following specific attribute name : member;Range=1000-1999 until it obtain the specific "EOF" result from the directory : member;Range=4999-* : cn userx,ou=etc.... The specific * saying : the directory has no more value. ---------------------------------------- Feature #254: Add paged-results support in LSC for multi-valued attribute http://tools.lsc-project.org/issues/254 Author: Frederic Soulier Status: New Priority: Normal Assigned to: Frederic Soulier Category: Core Target version: 1.2.x branch Modify LSC in order to query LDAP source (mainly MS AD) and use the paged-result system in order to query entries with multi-valued attributes that contains a lot of values. MS AD (2008R2) limit the number of values returned for a multi-valued attribute. This limit is configurable using the MS AD ntdsutil tool but it can't exceed the hardcoded limit of 5000 values for a multi-valued attribute. This can cause some troubles for AD Groups objects and their multi-valued attribute "member" which can contain more than 5000 members. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://tools.lsc-project.org/my/account
_______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-dev mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-dev
