[Freeipa-users] ipa user-find

[Dmitri Pal]

On 10/24/2012 10:57 PM, Steven Jones wrote:
> Hi,
>
> How do I bind as the directory manager?  Ive tried and I cant figure out how.
>
> and how do I get the web ui to return all users so I can see if the winsync is working , its a test bed so I need to do a side by side comparison....

It might be much easier to do an ldap search or use IPA command line to
get the list of the users and then dump it into a DB or table or
something else and then have a simple script that would do a comparison.
I am not sure web UI is the best way to do the task at hand.

> regards
>
> Steven Jones
>
> Technical Specialist - Linux RHCE
>
> Victoria University, Wellington, NZ
>
> 0064 4 463 6272
>
> ________________________________________
> From: Rob Crittenden [rcritten at redhat.com]
> Sent: Thursday, 25 October 2012 3:40 p.m.
> To: Steven Jones
> Cc: freeipa-users at redhat.com
> Subject: Re: [Freeipa-users] ipa user-find
>
> Steven Jones wrote:
>> When doing the above it only returns 2000, I have 6000
>>
>> How to get it to return 6000+?
> There are two size limits. One is a global limit in 389-ds-base,
> nsslapd-sizelimit which defaults to 2000.
>
> IPA has its own search limit which you can also set globally, or
> override it on the command line (which I'll do below).
>
> You'll need to bind as Directory Manager to change nsslapd-sizelimit
> then you can run:
>
> ipa user-find --sizelimit=8000
>
> I don't believe any services need to be restarted for this to take effect.
>
> We generally discourage enumerating all entries for performance reasons
> which is why by default the IPA size limit is 100.
>
> rob
>
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/