topic Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize" in Alfresco Archive

Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize"

ruslan — Mon, 28 Nov 2016 14:15:06 GMT

LDAP synchronization with Windows Active Directory cause error.Alfresco enviroment:alfresco@doc-server:/opt/alfresco-community$ uname -aLinux doc-server 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016 x86_64 x86_64 x86_64 GNU/Linuxalfresco@doc-server:/opt/alfresco-community$ lsb_release

Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize"

afaust — Mon, 28 Nov 2016 15:20:02 GMT

I don't think this is an issue of Alfresco. It looks very much like the LDAP / AD server does not support paginated queries at all (it reports an unavailable extension / unsupported operation). Please use a standalone LDAP client to verify if the LDAP / AD actually supports this kind of operation, and check the configuration of the server if that fails as well, proving my assumption / suspicion.

Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize"

ruslan — Tue, 29 Nov 2016 09:45:25 GMT

I was check LDAP queries in Active Directory Console installed on remote PC. It return ~2000 entities without errors.

Also I was try to do this queries by the ldapsearch utility on my server. It return 1000 entities and say about limitation:

root@doc-server:~# ldapsearch -H ldap://some-dc.***.local:389 -x -LLL -D AlfrescoLDAP@***.LOCAL -w ***-b "ou=***,dc=***,dc=local" "(&(objectclass=user)(userAccountControl:1.2.840.113556.1.4.803:=512))" dn | grep -c "^dn:"
Size limit exceeded (4)
1000

I don't know how to interpret such different results.

Re: Alfresco CE 5.1.0 (r127059-b7). Wrong work of "ldap.synchronization.queryBatchSize"

ruslan — Tue, 29 Nov 2016 09:48:19 GMT

The problem was solved for me by this guide: