On 21 Dec 2010, at 09:13, LIBRIZZI FRANCESCO wrote: > Hello, > I wrote a script for updating the LDAP content. I want to modify the members > that belong to a group. > Therefore I used the modify function with the replace option. In this latter > I used as parameter the new member list. > When the group members number is lower than 300 the update works fine. > Whereas, if that number is greater than 300 the update does not work. In this > case, the server does not update anything and it replies with the following > message: LDAP_OPERATIONS_ERROR - Server encountered an internal error > I tried the same operation by command line, using the ldapmodify command and > the same group member list. This latter works fine without any error message. > > Do you have any suggestion?
Do you have to replace all 300 members at once? That's kind of expensive, and it can be *much* more efficient to use modify/add and modify/delete to just add and delete particular values. Is this using SSL/TLS? There were problems in old releases with "large" operations over SSL, if memory serves. (I can't remember the details though.) Can you call $ldap->debug(5) before the modify operation and verify that the encoded operation looks OK? Cheers, Chris