Announcements

SecurID® Discussions

Browse the SecurID discussion board to get product help and collaborate with other SecurID users.
TIFFANYIRELAND
Beginner
Beginner

LDAP Paging

Jump to solution

Hello!

 

Sorry if this is obvious, but I tried searching and couldn't find an exact answer. Does the identity source LDAP query support paging results? Or does a large AD query need to be broken down into smaller queries such as this old KB shows: 000034356 - How to write an LDAP query filter f... | RSA Link 

 

 

"If there are 1000 or more users in AD, break down your single query into multiple smaller queries, with query filters similar to one of the examples below.  Note that the following queries will retrieve users with names starting with H through M.   Note that you must overlap the letters.
 

"(&(objectclass=user)(sn>=a*)(sn<=h*))"

 

"(&(objectclass=user)(sn>=h*)(sn<=n*))"           

 

"(&(objectclass=user)(sn>=n*)(sn<=z*))" 
"
Labels (1)
0 Likes
1 Solution

Accepted Solutions
EdwardDavis
Employee
Employee

In version 8.x we not longer need to write these type of filters to restrict the list, as we do not pull all users from ldap in one big batch.

View solution in original post

2 Replies
EdwardDavis
Employee
Employee

In version 8.x we not longer need to write these type of filters to restrict the list, as we do not pull all users from ldap in one big batch.

We had to do that in AM 6.1 and earlier, which was an LDAP synch to copy the users from LDAP into the internal database.  Since 7.1 the users no longer needed to be LDAPsynched, the internal database has a pointer to the ObjectGuid in LDAP, so its in real time.