Some users and groups in Active Directory are not imported

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP3 (5.1.6), 5.2 EE SP1 (5.2.5)
• Fix Version/s: 5.1 EE SP4 (5.1.7), 5.2 EE SP2 (5.2.6)
• Component/s: Application Security
• Labels:
  • 5.2_release_notes
• Environment: Microsoft Active Directory Server

This bug fix addresses two limitations of Microsoft's Active Directory Server:

1) Active Directory will only return the first 1500 value of a multi-valued attribute (1000 values for Windows Server 2000). To retrieve the additional values, additional queries are made using an Active Directory specific attribute syntax (member:range). This issue currently prevents the portal from importing any groups that has more than 1500 users or any user that has more than 1500 groups.

2) Active Directory will only return the first 1000 results of a query. To retrieve additional results, paging has been implemented for Active Directory queries This issue currently prevents the portal from importing more then 1000 groups (if importing by groups) or more then 1000 users (if importing by users).