topic Alfresco CE 5.1.0 (r127059-b7). Wrong work of &quot;ldap.synchronization.queryBatchSize&quot; in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291158#M244288 <HTML><HEAD></HEAD><BODY><P>LDAP&nbsp;synchronization with Windows Active Directory cause error.</P><P></P><P><SPAN style="text-decoration: underline;"><STRONG>Alfresco enviroment:</STRONG></SPAN></P><P></P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>alfresco@doc-server:/opt/alfresco-community$ uname -a<BR />Linux doc-server 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux</P></BLOCKQUOTE><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>alfresco@doc-server:/opt/alfresco-community$ lsb_release -a<BR />No LSB modules are available.<BR />Distributor ID: Ubuntu<BR />Description: Ubuntu 16.04.1 LTS<BR />Release: 16.04<BR />Codename: xenial</P></BLOCKQUOTE><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>alfresco@doc-server:/opt/alfresco-community$ sysinfo<BR />------------------ Java information ------------------<BR />Java version: 1.8.0_111<BR />Java supplier: Oracle Corporation<BR />Java home folder: /usr/lib/jvm/java-8-oracle/jre</P><P>...</P><P>java.specification.name: Java Platform API Specification<BR />java.specification.version: 1.8<BR />java.runtime.version: 1.8.0_111-b14</P></BLOCKQUOTE><P></P><P><SPAN style="text-decoration: underline;"><STRONG>Alfresco version:</STRONG></SPAN></P><P></P><P>Alfresco Community Edition 5.1.0 (r127059-b7)</P><P></P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>###############################<BR />## Common Alfresco Properties #<BR />###############################</P><P>dir.root=/opt/alfresco-community/alf_data</P><P>alfresco.context=alfresco<BR />alfresco.host=doc-server.***.local<BR />alfresco.port=8080<BR />alfresco.protocol=http</P><P>share.context=share<BR />share.host=doc-server.***.local<BR />share.port=8080<BR />share.protocol=http</P><P><BR />### database connection properties ###<BR />db.driver=org.postgresql.Driver<BR />db.username=***<BR />db.password=***<BR />db.name=***<BR />db.url=jdbc<img id="smileytongue" class="emoticon emoticon-smileytongue" src="https://connect.hyland.com/i/smilies/16x16_smiley-tongue.png" alt="Smiley Tongue" title="Smiley Tongue" />ostgresql://localhost/alfresco<BR /># Note: your database must also be able to accept at least this many connections. Please see your database documentation for instructions on how to configure this.<BR />db.pool.max=275<BR />db.pool.validate.query=SELECT 1</P><P><BR /># The server mode. Set value here<BR /># UNKNOWN | TEST | BACKUP | PRODUCTION<BR />system.serverMode=UNKNOWN</P><P><BR />### CIFS Server Configuration ###<BR />cifs.enabled=true<BR />cifs.ipv6=disabled<BR />cifs.serverName=${localname}<BR />cifs.doman=***.LOCAL<BR />cifs.hostannounce=true<BR />cifs.WINS.autoDetectEnabled=true<BR /><SPAN>cifs.urlfile.prefix=</SPAN><A class="jive-link-external-small" href="https://community.alfresco.com/external-link.jspa?url=https%3A%2F%2F%24" rel="nofollow noopener noreferrer" target="_blank">https://$</A><SPAN>{localname}:8080/alfresco</SPAN><BR />#cifs.bindto=10.***.***.230<BR />#cifs.broadcast=10.***.***.255<BR />cifs.platforms=linux,solaris,macosx<BR />cifs.disableNIO=false</P><P><BR />### FTP Server Configuration ###<BR />ftp.enabled=false<BR />ftp.port=21</P><P><BR />### RMI registry port for JMX ###<BR />alfresco.rmi.services.port=50500<BR />alfresco.rmi.services.host=doc-server.***.local</P><P><BR />### External executable locations ###<BR /># OpenOffice|LibreOffice configuration<BR />ooo.exe=/usr/bin/soffice<BR />ooo.enabled=true<BR />ooo.port=8100</P><P>img.root=/opt/alfresco-community/common<BR />img.dyn=${img.root}/lib<BR />img.exe=${img.root}/bin/convert</P><P>jodconverter.enabled=true<BR />jodconverter.officeHome=/usr/lib/libreoffice<BR />jodconverter.portNumbers=8100</P><P><BR />### Initial admin password ###<BR />alfresco_user_store.adminpassword=***</P><P><BR />### E-mail site invitation setting ###<BR />notification.email.siteinvite=false</P><P><BR />### License location ###<BR />dir.license.external=/opt/alfresco-community</P><P><BR />### Solr indexing ###<BR />index.subsystem.name=solr4<BR />dir.keystore=${dir.root}/keystore<BR />solr.host=localhost<BR />solr.port.ssl=8443</P><P><BR />### Allow extended ResultSet processing<BR />security.anyDenyDenies=false</P><P><BR />### Smart Folders Config Properties ###<BR />smart.folders.enabled=false</P><P><BR />### Remote JMX (Default: disabled) ###<BR />alfresco.jmx.connector.enabled=true<BR />alfresco.jmx.dir=/opt/alfresco-community/tomcat/webapps/alfresco/WEB-INF/classes/alfresco</P><P><BR />### Alfresco authentication sybsystem ###<BR />authentication.chain=kerberos1:kerberos,ldap1:ldap-ad<BR />synchronization.synchronizeChangesOnly=true</P><P>#__ Kerberos___#<BR />kerberos.authentication.realm=***.LOCAL<BR />kerberos.authentication.sso.enabled=true<BR />kerberos.authentication.authenticateCIFS=true<BR />kerberos.authentication.user.configEntryName=ShareHTTP<BR />kerberos.authentication.cifs.configEntryName=AlfrescoHTTP<BR />kerberos.authentication.http.configEntryName=AlfrescoCIFS<BR />kerberos.authentication.defaultAdministratorUserNames=***,***<BR />kerberos.authentication.browser.ticketLogons=true<BR />kerberos.authentication.stripUsernameSuffix=true</P><P>#__ LDAP S __#<BR />ldap.authentication.active=false<BR />ldap.authentication.java.naming.security.authentication=DIGEST-MD5<BR />ldap.authentication.userNameFormat=%s@***.local<BR />ldap.authentication.allowGuestLogin=false<BR />#dap.authentication.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory<BR />ldap.authentication.java.naming.provider.url=ldap://some-dc.***.local:389<BR />ldap.authentication.escapeCommasInBind=false<BR />ldap.authentication.escapeCommasInUid=false</P><P>ldap.synchronization.active=true<BR />ldap.synchronization.java.naming.security.authentication=simple<BR />ldap.synchronization.java.naming.security.principal=AlfrescoLDAP@***.local<BR />ldap.synchronization.java.naming.security.credentials=***<BR /><STRONG>ldap.synchronization.queryBatchSize=500</STRONG><BR />ldap.synchronization.timestampFormat=yyyyMMddHHmmss'.0Z'<BR />ldap.synchronization.groupDifferentialQuery=(&amp;(objectclass=nogroup)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.personQuery=(&amp;(objectclass\=user)(userAccountControl\:1.2.840.113556.1.4.803\:\=512))<BR />ldap.synchronization.personDifferentialQuery=(&amp;(objectclass\=user)(!(modifyTimestamp&lt;\={0})))<BR />ldap.synchronization.groupQuery=(objectclass\=group)<BR />ldap.synchronization.groupSearchBase=ou=***,ou=***,dc=***,dc=local<BR />ldap.synchronization.userSearchBase=ou=***,dc=***,dc=local</P><P>ldap.synchronization.com.sun.jndi.ldap.connect.pool=true<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.authentication=DIGEST-MD5<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.protocol=plain<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.initsize=1<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.maxsize=4<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.prefsize=1000<BR />ldap.pooling.com.sun.jndi.ldap.connect.pool.timeout=900<BR />ldap.pooling.com.sun.jndi.ldap.connect.timeout=600</P></BLOCKQUOTE><P>I have some experiments with&nbsp;<EM>ldap.synchronization.queryBatchSize</EM><STRONG style="background-color: #f6f6f6;">&nbsp;</STRONG>value in range <EM>500-2000</EM></P><P></P><P><SPAN style="text-decoration: underline;"><STRONG>Active Directory Server:</STRONG></SPAN></P><P></P><P>Windows Server 2008 R2</P><P></P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>C:\Windows\System32&gt;ntdsutil<BR />ntdsutil: ldap policies<BR />ldap policy: connections<BR />server connections: connect to server <SPAN style="background-color: #f6f6f6;">some-</SPAN><SPAN style="background-color: #f6f6f6;">dc</SPAN><SPAN style="background-color: #f6f6f6;">.</SPAN><SPAN style="background-color: #f6f6f6;">***</SPAN><SPAN style="background-color: #f6f6f6;">.local</SPAN><BR />...</P><P>server connections: q<BR />ldap policy: Show values</P><P></P><P><SPAN style="background-color: #f6f6f6;">policy&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Current</SPAN>(New)</P><P>MaxPoolThreads&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4<BR />MaxDatagramRecv&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;4096<BR />MaxReceiveBuffer&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10485760<BR />InitRecvTimeout&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;120<BR />MaxConnections&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;5000<BR />MaxConnIdleTime&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;900<BR /><STRONG>MaxPageSize&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;1000</STRONG><BR />MaxQueryDuration &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;120<BR />MaxTempTableSize &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;10000<BR />MaxResultSetSize &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;262144<BR />MinResultSets &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0<BR />MaxResultSetsPerConn &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0<BR />MaxNotificationPerConn &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;5<BR />MaxValRange &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1500<BR />ThreadMemoryLimit &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;0<BR />SystemMemoryLimitPercent &nbsp;&nbsp;&nbsp;0</P></BLOCKQUOTE><P></P><P><SPAN style="text-decoration: underline;"><STRONG>Problem description:</STRONG></SPAN></P><P></P><P>If value of <EM>ldap.synchronization.queryBatchSize</EM> is <EM>500&nbsp;</EM>alfresco.log&nbsp;present&nbsp;error:</P><P></P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Processing query<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Search base: ou=***,ou=***,dc=***,dc=local<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Return result limit: 0<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] DerefLink: false<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Return named object: false<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Time limit for search: 0<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attributes to return: 4 items.<BR />2016-11-28 13:18:19,056 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attribute: cn<BR />2016-11-28 13:18:19,057 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attribute: displayName<BR />2016-11-28 13:18:19,057 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attribute: member;range=0-999<BR />2016-11-28 13:18:19,057 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attribute: whenChanged<BR />2016-11-28 13:18:19,063 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Found 0<BR />2016-11-28 13:18:19,070 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=1 Group Analysis: Commencing batch of 0 entries<BR />2016-11-28 13:18:19,071 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization,Category=directory,id1=ldap1,id2=1 Group Analysis: Completed batch of 0 entries<BR />2016-11-28 13:18:19,076 INFO [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving users changed since 14.11.2016 23:35:36 from user registry 'ldap1'<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Processing query<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Search base: ou=***,dc=***,dc=local<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Return result limit: 0<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] DerefLink: false<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Return named object: false<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Time limit for search: 0<BR />2016-11-28 13:18:19,078 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Attributes to return: 0 items.<BR /><SPAN style="color: #008000;"><STRONG>2016-11-28 13:18:19,120 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Processing person: CN=***,OU=***,OU=***,OU=***,DC=***,DC=LOCAL</STRONG></SPAN></P><P></P><P><SPAN style="color: #008000;"><STRONG>... 498 similar lines (500 total) ...</STRONG></SPAN></P><P></P><P><SPAN style="color: #008000;"><STRONG>2016-11-28 13:18:19,213 DEBUG [org.alfresco.repo.security.sync.ldap.LDAPUserRegistry] [localhost-startStop-1] Processing perso n: CN=***,OU=***,OU=***,OU=***,DC=***,DC=LOCAL</STRONG></SPAN><BR /><SPAN style="color: #ff0000;"><STRONG>2016-11-28 13:18:19,221 ERROR [org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synch ronization aborted due to error</STRONG></SPAN><BR /><SPAN style="color: #ff0000;"><STRONG>org.alfresco.error.AlfrescoRuntimeException: 10280001 LDAP search error. Cause: [LDAP: error code 12 - 00002040: SvcErr : DSID-031401F1, problem 5010 (UNAVAIL_EXTENSION), data 0]</STRONG></SPAN><BR /> at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1303)<BR /> at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.access$14(LDAPUserRegistry.java:1255)<BR /> at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry$PersonCollection.&lt;init&gt;(LDAPUserRegistry.java:1492)<BR /> at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.getPersons(LDAPUserRegistry.java:551)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.syncWithPlugin(ChainingUserRegistrySynchronizer.ja va:1755)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.synchronizeInternal(ChainingUserRegistrySynchroniz er.java:719)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.access$14(ChainingUserRegistrySynchronizer.java:45 1)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer$7.doWork(ChainingUserRegistrySynchronizer.java:208 5)<BR /> at org.alfresco.repo.security.authentication.AuthenticationUtil.runAs(AuthenticationUtil.java:548)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onBootstrap(ChainingUserRegistrySynchronizer.java: 2079)<BR /> at org.springframework.extensions.surf.util.AbstractLifecycleBean.onApplicationEvent(AbstractLifecycleBean.java:56)<BR /> at org.alfresco.repo.security.sync.ChainingUserRegistrySynchronizer.onApplicationEvent(ChainingUserRegistrySynchronize r.java:2442)<BR /> at org.springframework.context.event.SimpleApplicationEventMulticaster.multicastEvent(SimpleApplicationEventMulticaste r.java:96)<BR /> at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ChildApplicationContext.publishEvent(ChildAp plicationContextFactory.java:559)<BR /> at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:950)<BR /> at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)<BR /> at org.alfresco.repo.management.subsystems.ChildApplicationContextFactory$ApplicationContextState.start(ChildApplicati onContextFactory.java:814)<BR /> at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.start(AbstractPropertyBackedBean.java:1086)<BR /> at org.alfresco.repo.management.subsystems.AbstractPropertyBackedBean.onApplicationEvent(AbstractPropertyBackedBean.ja va:625)<BR /> at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEventInternal(SafeApplicationEventMulticaster .java:207)<BR /> at org.alfresco.repo.management.SafeApplicationEventMulticaster.multicastEvent(SafeApplicationEventMulticaster.java:17 <span class="lia-unicode-emoji" title=":smiling_face_with_sunglasses:">😎</span><BR /> at org.springframework.context.support.AbstractApplicationContext.publishEvent(AbstractApplicationContext.java:334)<BR /> at org.springframework.context.support.AbstractApplicationContext.finishRefresh(AbstractApplicationContext.java:950)<BR /> at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:482)<BR /> at org.springframework.web.context.ContextLoader.configureAndRefreshWebApplicationContext(ContextLoader.java:410)<BR /> at org.springframework.web.context.ContextLoader.initWebApplicationContext(ContextLoader.java:306)<BR /> at org.springframework.web.context.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:112)<BR /> at org.alfresco.web.app.ContextLoaderListener.contextInitialized(ContextLoaderListener.java:63)<BR /> at org.apache.catalina.core.StandardContext.listenerStart(StandardContext.java:5016)<BR /> at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5524)<BR /> at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)<BR /> at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)<BR /> at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)<BR /> at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)<BR /> at org.apache.catalina.startup.HostConfig.deployDescriptor(HostConfig.java:672)<BR /> at org.apache.catalina.startup.HostConfig$DeployDescriptor.run(HostConfig.java:1859)<BR /> at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)<BR /> at java.util.concurrent.FutureTask.run(FutureTask.java:266)<BR /> at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)<BR /> at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)<BR /> at java.lang.Thread.run(Thread.java:745)<BR />Caused by: javax.naming.OperationNotSupportedException: [LDAP: error code 12 - 00002040: SvcErr: DSID-031401F1, problem 5010 ( UNAVAIL_EXTENSION), data 0<BR />]; remaining name 'ou=***,dc=***,dc=local'<BR /> at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3196)<BR /> at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3082)<BR /> at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888)<BR /> at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1846)<BR /> at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1769)<BR /> at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392)<BR /> at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358)<BR /> at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:341)<BR /> at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)<BR /> at org.alfresco.repo.security.sync.ldap.LDAPUserRegistry.processQuery(LDAPUserRegistry.java:1282)<BR /> ... 40 more</P></BLOCKQUOTE><P></P><P><SPAN>If value of </SPAN><EM>ldap.synchronization.queryBatchSize</EM><SPAN> is</SPAN><SPAN> </SPAN><EM>1000 or great&nbsp;</EM><SPAN>alfresco.log&nbsp;</SPAN><SPAN>present&nbsp;</SPAN><SPAN>1000 succsesful queries and get error on 1001 entity.</SPAN></P><P></P><P><SPAN style="text-decoration: underline;"><STRONG>How I can fix it?</STRONG></SPAN></P><P></P><P>By secure reason change policy of LDAP is not possible.</P></BODY></HTML> Mon, 28 Nov 2016 14:15:06 GMT ruslan 2016-11-28T14:15:06Z Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize" https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291158#M244288 LDAP&nbsp;synchronization with Windows Active Directory cause error.Alfresco enviroment:alfresco@doc-server:/opt/alfresco-community$ uname -aLinux doc-server 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016 x86_64 x86_64 x86_64 GNU/Linuxalfresco@doc-server:/opt/alfresco-community$ lsb_release Mon, 28 Nov 2016 14:15:06 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291158#M244288 ruslan 2016-11-28T14:15:06Z Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize" https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291159#M244289 <HTML><HEAD></HEAD><BODY><P>I don't think this is an issue of Alfresco. It looks very much like the LDAP / AD server does not support paginated queries at all (it reports an unavailable extension / unsupported operation). Please use a standalone LDAP client to verify if the LDAP / AD actually supports this kind of operation, and check the configuration of the server if that fails as well, proving my assumption / suspicion.</P></BODY></HTML> Mon, 28 Nov 2016 15:20:02 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291159#M244289 afaust 2016-11-28T15:20:02Z Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize" https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291160#M244290 <HTML><HEAD></HEAD><BODY><P>I was check LDAP queries in Active Directory Console installed on remote PC. It return ~2000 entities without errors.</P><P>Also I was try to do this queries by the ldapsearch utility on my server. It return 1000 entities and say about limitation:</P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P></P>root@doc-server:~# ldapsearch -H ldap://some-dc.***.local:389 -x -LLL -D AlfrescoLDAP@***.LOCAL -w ***-b "ou=***,dc=***,dc=local" "(&amp;(objectclass=user)(userAccountControl:1.2.840.113556.1.4.803:=512))" dn | grep -c "^dn:"<BR />Size limit exceeded (4)<BR />1000</BLOCKQUOTE><P>I don't know&nbsp;how to interpret such different results.</P></BODY></HTML> Tue, 29 Nov 2016 09:45:25 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291160#M244290 ruslan 2016-11-29T09:45:25Z Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize" https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291161#M244291 <HTML><HEAD></HEAD><BODY><P>The problem was solved for me by this guide:<A __default_attr="210492" __jive_macro_name="thread" _jive_internal="true" class="jive_macro_thread jive_macro link-titled" href="https://community.alfresco.com/thread/210492-ldap-group-memberships-not-synchronized-v50a" rel="nofollow noopener noreferrer"></A>&nbsp;</P></BODY></HTML> Tue, 29 Nov 2016 09:48:19 GMT https://connect.hyland.com/t5/alfresco-archive/alfresco-ce-5-1-0-r127059-b7-wrong-work-of-quot-ldap/m-p/291161#M244291 ruslan 2016-11-29T09:48:19Z