Details
-
Improvement
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
2.0.0-M8 (2.0.0.v20130628)
-
All?
Description
Active Directory enforces an maxRageValue on multi-valued attributes.
I found an RFC draft that descibes the option.
http://www.ietf.org/old/2009/proceedings/01dec/I-D/draft-kashi-incremental-00.txt
most ldapsearch utilities will allow the use using a similar command TO:
ldapsearch -h servername.com -x -D "userfdn" -W -b "CN=Groupname,Groups,DC=yourdomain,DC=net" -s sub -a always -z 1000 "(objectClass=*)" "member;Range=0-*" "objectClass"
This will allow the return of the member attribute values upto the limit of the range.
When I use Studio and enter "member;Range=0-* as an attribute value, the value is seprated at the "=" which is substituted with a ",".