SID-01644: User details from different locations in the LDAP server

Status:	Answered	TWiki version:	4.1.2	Perl version:	5.8.8
Category:	LdapContrib	Server OS:	Windows Server 2003	Last update:	12 years ago

In my installation, I get the user details from the LDAP server using LDAPContrib (version v2.99.5 - last update 25 May 2008). I have these lines in my LocalSite.cfg:

$TWiki::cfg{Ldap}{Base} = 'ou=IN,ou=Landlord IN,ou=Corporate,dc=mydomain,dc=com';
$TWiki::cfg{Ldap}{UserBase} = 'ou=users,ou=IN,ou=Landlord IN,ou=Corporate,dc=mydomain,dc=com';
$TWiki::cfg{Ldap}{GroupBase} = 'ou=Manual,ou=Distribution Lists,ou=IN,ou=Landlord IN,ou=Corporate,dc=mydomain,dc=com';

This setup has been working fine. I am able to get the details of about 1000 users

I have another set of 100 users (added newly) at the location: 'ou=users,ou=IN,ou=Landlord CA,ou=Corporate,dc=mydomain,dc=com';

If I use the line:

$TWiki::cfg{Ldap}{UserBase} = 'ou=users,ou=IN,ou=Landlord CA,ou=Corporate,dc=mydomain,dc=com';

Is there a way to get the details of all (1000+100) users at the same time?

-- Chengappa Chemira - 2013-02-22

Discussion and Answer

Turn on debug and see if you get any limit info in data/debug.txt. The limit is likely on the LDAP server side, e.g. not in the LdapContrib.

Even if the returned number of records is limited, the LdapContrib should do a new LDAP query in case a record is not already cached.

-- Peter Thoeny - 2013-03-05

Peter, I don't think it is an issue of limit. If I put the line:

$TWiki::cfg{Ldap}{UserBase} = 'ou=Corporate,dc=mydomain,dc=com';

in my LocalSite.cfg, I get the details of about 45000 users !

I am trying to reduce the load by getting the details of about 1000 users from one location and about 100 users from another location in the LDAP server. The problem is that these locations are at different parts of the LDAP tree and I am trying to combine just these two.

-- Chengappa Chemira - 2013-03-06

Oh, now I understand your objectives. I see two options:

1. Ask in an LDAP forum if/how an OR query can be done with a single LDAP search.

2. If option 1 is not possible, look into enhancing the LdapContrib with a second query, run that query if specified, and add the result to the result of the first query.

-- Peter Thoeny - 2013-03-06

Closing this question after more than 30 days of inactivity. Feel free to reopen if needed. Consider engaging one of the TWiki consultants if you need timely help. We invite you to get involved with the community, it is more likely you get community support if you support the open source project!

-- Peter Thoeny - 2013-05-01

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.