You are not logged in.
Pages: 1
Hi,
since 1 week i got problems to import new users from AD.
i have an error when i want to import new users from ldap and all new users are not imported
when i sync the users already imported i got no error .
in debug mode it give me this message :
PHP ERROR: ldap_search() [function.ldap-search]: Search: Bad search filter in /var/www/glpi/inc/ldap.function.php at line 427
and in the logs i got this one :
02-11-2009 18:35
Warning(2): ldap_search() [<a href='function.ldap-search'>function.ldap-search</a>]: Partial search results returned: Sizelimit exceeded
Backtrace :
/var/www/glpi/inc/ldap.function.php:427 ldap_search()
/var/www/glpi/inc/ldap.function.php:524 getAllLdapUsers()
/var/www/glpi/front/ldap.import.php:108 showLdapUsers()
apparently i've got a field that exeed the size limit in the new users
any ID how to solve this issue will be appretiated .
thanks in advance
Bernard
Offline
I have alredy tried and applied this tutorial:
http://www.glpi-project.org/wiki/doku.php?id=en:ldap
Offline
2 problems :
Bad filter
and sizelimit :
this is not an error from GLPI but something you have to configure on your AD : the ldap request must return more values that the maximum limit
please read : http://glpi-project.org/wiki/doku.php?id=en:ldap
1000 query limit
Xavier Caillaud
Blog GLPI Infotel
Offline
I did this already .
my question is
is there any way to see witch record is blocking .
Bernard
Offline
what is your filter into ldap configuration into glpi ?
Xavier Caillaud
Blog GLPI Infotel
Offline
hi,
my filter is
(&(objectClass=user)(objectCategory=person)(!userAccountControl: 1.2.840.113556.1.4.803:=2)))
after some try when i put only
(&(objectClass=user)(objectCategory=person) without the disabled user filter it work .
strange ..!
any ideas
thanks in advance for your reactivity .
Bernard
Last edited by miyorni (2009-11-03 21:45:33)
Offline
Offline
MS Active Directory 2008
Bernard
Offline
(!userAccountControl: 1.2.840.113556.1.4.803:=2) with AD 2003 says : not users desactivated.
In windows 2008 perhaps this is not the same attribute.
Xavier Caillaud
Blog GLPI Infotel
Offline
Pages: 1