ldap error when sync.

[marcio]

Hello. When I start Alfresco service ( 5.0 CE ) I got this error in catalina.out:

2016-02-24 09:44:42,119  INFO  [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Retrieving users changed since Feb 24, 2016 7:59:30 AM from user registry 'ldap1'
2016-02-24 09:44:42,872  ERROR [security.sync.ChainingUserRegistrySynchronizer] [localhost-startStop-1] Synchronization aborted due to error
org.alfresco.error.AlfrescoRuntimeException: 01240001 Error during LDAP Search. Reason:[LDAP: error code 11 - Administrative Limit Exceeded]

-My ldap/free-ipa have the limit query configured in 2000 queries.

I tested with:
ldap.synchronization.attributeBatchSize=5000
ldap.synchronization.queryBatchSize=5000

and using too:
ldap.synchronization.attributeBatchSize=0
ldap.synchronization.queryBatchSize=0

Using both options I have the same error. Any idea about this error ?
Thank you

**
Resolution: Changed the ldap group filter, decreasing the number of groups/users.
**

[romschn]

To me, it looks more of an LDAP directory issue which is not allowing to query more records than what are allowed on it. Earlier I read somewhere that you may need to increase that attribute value on your directory server. If I am not wrong, the attribute name is nsslapd-sizelimit. I have never tried it though. Kindly check and see if it works.

Hope this helps.

[mrogers]

Why are you querying for 5000 entries when your limit is 2000? 

[marcio]

The value 5000 is for tests only.  I used the value 0 for months without any problem.