shekhar.shrinivasan(a)gmail.com wrote:
Hi,
Does openLDAP support searching with "member;range=0-1499" ?
Not directly. That syntax is Microsoft-specific and violates the LDAP specification.
We have a back_meta configured in front of AD and when we try to
search for a group having more than 1500 members using the following filter - ldapsearch
-LLL -h <hostname> -p <port> -D <user dn> -w -s sub -b <basedn>
'(cn=<group-dn>)' 'member;range=0-1499'
we get the error as seen below -
slap_bv2undef_ad(member;range=0-1499): AttributeDescription contains inappropriate
characters.
Any pointers ? Thanks for your help !
Use the attributeoptions directive to define it.
attributeoptions range=
--
-- Howard Chu
CTO, Symas Corp.
http://www.symas.com
Director, Highland Sun
http://highlandsun.com/hyc/
Chief Architect, OpenLDAP
http://www.openldap.org/project/