Hi Jeff, The LSC is first looking for all entries identifier (filterAll), then for every entry, it looks it the dedicated entry (filterId). In the second search, if more than one entry is returned, the LSC cannot determined how to handle it and throw an error. I suggest you try to use another attribute (samAccountName) because you can have more than one person with the same name (sn).
This is the reverse configuration (OpenLDAP to AD), but I suggest you can take a look at the following page : http://lsc- project.org/wiki/documentation/1.2/tutorials/openldaptoactivedirectory Regards, Le mardi 13 juillet 2010 01:19:11, [email protected] a écrit : > I've been trying to configure lsc-1.2.0 to sync from Active Directory > to OpenLDAP and have been running into problems. > > Specifically, lsc seems to connect (and Wireshark confirms) ok to AD > and starts sucking out user records with: > lsc.tasks.FirstTask.srcService.filterAll = > (&(sn=*)(objectcategory=person)(objectcategory=user)) > > Isc is configured to operate in paging mode: > src.java.naming.ldap.pageSize = 1000 > > However, it immediately starts printing: > ERROR - Too many entries returned (base: "", filter: "(sn=somelastname)") > ERROR - Error while synchronizing ID cn=some full name,ou=People: > javax.naming.SizeLimitExceededException: Too many entries returned > (base: "", filter: "(sn=somelastname)") > where "somelastname" and "some full name" are different. > > It looks like (from Wireshark) that a query is made for a page, then > multiple chunks (something like 2-3 users per chunk) are coming back > from AD until the page is complete. Then lsc makes the request for > the next page until all records are successfully retrieved. > > Any pointers at all where to start debugging would be greatly appreciated. > > Thanks in advance, > Jeff Katcher > _______________________________________________________________ > Ldap Synchronization Connector (LSC) - http://lsc-project.org > > lsc-users mailing list > [email protected] > http://lists.lsc-project.org/listinfo/lsc-users -- Sebastien BAHLOUL IAM and Security Solutions Manager LINAGORA : http://www.linagora.com/ Tel / Phone : +33 810 251 251 Mobile : +33 (0)6 45 63 27 39 74/80 rue Roque de Fillol 92800 Puteaux ----------- http://linid.org/ - http://linpki.org/ IAM and security Open Source projects _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
