Mantis Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0000087Active Directory IntegrationBulk Importpublic2015-08-14 09:372015-08-14 09:43
Reporterlgladdy 
Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
StatusnewResolutionopen 
Platform1.1.7OSOS Version
Product Version1.1.5 
Target VersionFixed in Version 
Summary0000087: On Windows 2012 DC/Forests, group_info fails tor return members for groups > 1500.
DescriptionRelated to 0000058, our client has recently upgraded to Windows 2012 DCs and upgraded their Forest, and this has broken the ability for ADI to get more than > 1500.

The function group_members (line 841 of adLDAP.php) makes a call to $this->group_info and checks if $info[0]['member'] is set, but for a group name (not primaryid - so id:513; works fine) containing more than 1500 users, this fails, because the data is actually returned in $info[0]['member;range=0-1499']; and only 1500 results are returned.

I've had to rewrite the group_info function to fix this, because it seems the ldap pagination stuff doesn't work when you query a group on 2012 DCs.

https://gist.github.com/lgladdy/e997981ee47b65675eaf [^]
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
(0000131)
lgladdy (reporter)
2015-08-14 09:43
edited on: 2015-08-14 10:04

Quick note, ignore the references to Windows 2003 in the gist. I originally used this code before you added the pagination support, so removed it when that release came out, but have had to add it back in now :)


- Issue History
Date Modified Username Field Change
2015-08-14 09:37 lgladdy New Issue
2015-08-14 09:43 lgladdy Note Added: 0000131
2015-08-14 10:04 lgladdy Note Edited: 0000131 View Revisions


Copyright © 2000 - 2010 MantisBT Group
Powered by Mantis Bugtracker