Hi, I don't have an active directory at hand to test this.. but it should be possible to create an openldap cache for your ad using the pcache overlay and ad as ldap "database backend". Openldap should have no issue with 20k entries.
/rupi -- Rainer Ruprechtsberger Volkshilfe Oberösterreich IT 4020 Linz, Glimpfingerstrasse 48 Tel.: +43 732 3405 123 Mobil.: +43 676 8734 1123 ZVR Zahl: 064371505 Volkshilfe. Wir sind für die Menschen da. -- users@sogo.nu https://inverse.ca/sogo/lists