Greetings wise ones. We are trying as best we can to do our Windows 2000 user maintenance from UNIX using Net::LDAP. On my test Active Directory Server, this teensy LDAP search on the users works just fine. However, on the real server with the real list of users (>3000), my code bails with a "Sizelimit exceeded at ./simple.ad.pl line 26."

I did google this a little bit, and it appears the Sizelimit is an LDAP server setting and it can be adjusted with ntdsutil according to this, but I would prefer not to mess with the server settings if it's at all possible. With SQL I can do a LIMIT startnumber, endnumber on my SELECT statements and do multiple selects. Is there a practical way to do this with LDAP? I don't think using $ldap->search(sizelimit=>x) will cut it here.

Here is the code that I used:

#!/usr/local/perl/bin/perl -w

use Net::LDAP;

my $dc = 'my Active Directory's Servers Ip'
my $ldap = Net::LDAP->new($dc) or die $@;

my $rootdse = $ldap->root_dse(attrs=>['defaultNamingContext']);
my $base = $rootdse->get_value('defaultNamingContext');

my $user = 'mySuperuser@ad.mydomain.com';
my $password = 'mySuperUserPassword';

my $rc = $ldap->bind ($user, password=>$password);
die $rc->error if $rc->code;

my $scope="subtree";

my $filter="(&(objectClass=organizationalPerson))";
my $attrs=['distinguishedName'];
my $search=$ldap->search(
   base => $base,
   filter => $filter,
   attrs => $attrs
  );
die $search->error if $search->code;

foreach my $entry ($search->entries) {
  $entry->dump;
}
[download]

many thanks,

Rohit