-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support Attribute Ranges with Active Directory #98
Comments
just realizing it's not documented. Yes, you can add the following to your ldap insert to enable paging:
where |
This is perfect!!! Works as you mentioned. Thank you. |
re-opening so i remember to document in the next release |
If you're setting the page size to |
I am looking for MyVD to return all attributes without pages. So, if Active Directory contains 5 pages of 1500 members each, I am looking for a setting which returns all 7500 members in one time. |
right, MyVD handles the paging logic for you with AD/ADLDS. The
Exactly. Setting the |
ADLDS can only handle 1500 entries at the time. So, when I set 7500, I am still getting 1500 based on the limit of ADLDS setting. MyVD should have some setting to interrogate pages if ADLDS returns less members in the single page compare to preset setting. I would be ok if I can use "server.BaseServer.LDAPBaseServer.config.usePaging=false" and MyVD would interrogate all the pages from ADLDS and returns every member without pages. |
I think there's a disconnect on how the paged search feature in MyVD works. When your client does a search against MyVD with The |
So, if ADLDS limit is 1500 members per page, MyVD will not able to show to client larger amount. Unless, I will write custom adapter to interrogate ADLDS pages and return single blob with all 7500 entries. Is this correct? |
No. ADLDS has a limit of 1500 entries per page. Setting the MyVD |
i think the image got cropped. You have to use pages with ADLDS and AD. That's why MyVD implements it this way so you can work with large search results that exceed the maximum search size for your directory without your client having to understand how to work with pages. What happens when you set the |
1400 setting works well. Also, the image was not cropped, I used MyVD to proxy Oracle Virtual Directory which interrogated pages from ADLDS and returned 11110 count without paging feature. This use case is necessary because some legacy apps relying on retrieval of all users and not capable to support pages. |
You're going client --> MyVD --> OVD --> ADLDS? Why? MyVD will do that paging for you. Unless you have a custom plugin written for OVD there's nothing OVD can do that MyVD can't. |
Correct, I want to remove OVD and do client --> MyVD -->ADLDS but show to client all members without paging. |
So you're saying that with |
I am saying that usePaging set to false do not return all members but pages per ADLDS page limit, while I am looking for MyVD to return all 11110 members. |
That's expected. to keep your clients from having to use paging for large result sets you set client (no paging) --> MyVD --> paging --> ADLDS once you set
|
|
We are on 2016 ADLDS and I am using ApacheDS client as quick search. |
Can you add the DumpTransactions insert? Add it to the global chain. It would look like:
this will tell me the ldap search that's being performed. Also, can you confirm that the logs say |
[2021-02-04 20:25:53,887][main] INFO LDAPInterceptor - usePaging - 'true' |
Ok, now i see where the confusion is. I thought we were talking about entry limits. You're talking about attribute limits (apparently AD calls this Range Retrieval). MyVD doesn't support this right now but let me take a look at what it would take to support. |
implementation note - https://ldapwiki.com/wiki/LDAP_SERVER_RANGE_OPTION_OID |
Thank you for helping out!!! |
We can get this into the 1.0.10 release. I'm hoping to get that released with openunison 1.0.21 at end of february. i'll see if we can get this implemented for testing late next week. |
@someknowledge I have an initial version working.
After restart you should get all your members. In the logs you should see something like:
|
Sorry for the long delay. After updating to a newer version I see all
members of the group.
Thank you.
…On Tue, Feb 9, 2021 at 2:23 PM Marc Boorshtein ***@***.***> wrote:
@someknowledge <https://github.com/someknowledge> I have an initial
version working.
1. Download
https://nexus.tremolo.io/repository/files/myvd-server-1.0.10.jar
2. copy it into your myvd libs folder
3. remove libs/myvd-server-1.0.9.jar
4. restart myvd
After restart you should get all your members. In the logs you should see
something like:
[2021-02-09 14:15:22,285][main] INFO LDAPEntrySet - attribute : member;range=0-1499 is a range
[2021-02-09 14:15:22,293][main] INFO LDAPEntrySet - 0-1499
[2021-02-09 14:15:22,293][main] INFO LDAPEntrySet - total : 1500
[2021-02-09 14:15:22,441][main] INFO LDAPEntrySet - 1500-2999
[2021-02-09 14:15:22,602][main] INFO LDAPEntrySet - 3000-4499
[2021-02-09 14:15:22,756][main] INFO LDAPEntrySet - 4500-5999
[2021-02-09 14:15:22,938][main] INFO LDAPEntrySet - 6000-7499
[2021-02-09 14:15:23,134][main] INFO LDAPEntrySet - 7500-8999
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#98 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AA5CIMGWQVDXAOUDKEGHPJTS6GDTTANCNFSM4W72O7FA>
.
|
Hi I am new to MyVD and just setup simple configuration to proxy our ADLDS directory. However, when I search on a group with large amount of entries (15000), I am getting pages each contains 1500 entries. Is there a way to configure MyVD to return all existing entries in the group by interrogating ADLDS?
P.S. ADLDS default setting is 1500 entries per page and we cannot increase it.
Thank you.
The text was updated successfully, but these errors were encountered: