shekhar.shrinivasan@gmail.com wrote:

Hi,

Does openLDAP support searching with "member;range=0-1499" ?

Not directly. That syntax is Microsoft-specific and violates the LDAP specification.

We have a back_meta configured in front of AD and when we try to search for a group having more than 1500 members using the following filter - ldapsearch -LLL -h <hostname> -p <port> -D <user dn> -w -s sub -b <basedn> '(cn=<group-dn>)' 'member;range=0-1499' we get the error as seen below - slap_bv2undef_ad(member;range=0-1499): AttributeDescription contains inappropriate characters.

Any pointers ? Thanks for your help !

Use the attributeoptions directive to define it.

attributeoptions range=