Forum GLPI-Project

ekataniss

Member

Registered: 2015-04-02

Posts: 25

No users to import from ldap

Hi,
several weeks ago I started to get warning messages when I imported new users from AD or sync old users. Automatic procedures of import and sync didn't work, but manual import and sync worked. In debug mode it gave me message about sizelimit exceeded:

Warning(2): ldap_search(): Partial search results returned: Sizelimit exceeded
Backtrace :
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:1395       
ldap_search()
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:1522       
AuthLDAP::searchForUsers()
C:\xampp\htdocs\helpdesk\scripts\ldap_mass_sync.php:152       
AuthLDAP::getAllUsers()
C:\xampp\htdocs\helpdesk\scripts\ldap_mass_sync.php:115       
import()

I increased the maxPageSize limit of 1000 up to 5000 on AD as recommended. After this I restarted Apache and got messages that no users for import (and for sync the same message):

Warning(2): ldap_search() [<a href='function.ldap-search'>function.ldap-search</a>]: Search: Operations error
Backtrace :
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:1395       
ldap_search()
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:1522       
AuthLDAP::searchForUsers()
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:1266       
AuthLDAP::getAllUsers()
C:\xampp\htdocs\helpdesk\inc\authldap.class.php:2906       
AuthLDAP::showLdapUsers()
C:\xampp\htdocs\helpdesk\front\ldap.import.php:70       
AuthLDAP::searchUser()

I use GLPI 0.84.2 and AD on MS Windows Server 2008 R2.
Server port: 389. Login Field: samaccountname
Basedn: OU=Region,DC=company,DC=com   
Rootdn: CN=glpi,OU=Region,DC=company,DC=com
Pass (for rootdn): clear
Connection filter: (&(objectClass=user)(objectCategory=person))
Filter (&(objectClass=user)(objectCategory=person))(!(userAccountControl:1.2.840.113556.1.4.803:=2))) doesn't work also.

Any ideas how to solve this issue will be appretiated.
Thanks in advance.

Kate

sum1

Member

Registered: 2017-01-18

Posts: 3

Re: No users to import from ldap

If it works by triggering an ldapsearch manually from command line, maybe try adding a group in ur AD - e.g. "GLPI users" and add that as additional filter to get less results - in case you don't need all the users.

---

... tired of signatures