problem with ids and active directory

[MitelMate]

Has anyone had a problem whereby when opsman ids does a sync with AD it does not pick up changes. We have found that by changing the ldap path in ids to point to a specific AD folder where a change is sitting then it will be picked up. However, the ids ldap search is not searching subfolders. When set to the normal search path, it's not hopping past more than one folder.

It used to work, I'm told that it stopped working when the AD server was migrated to windows2003 but I don't know that for sure.

We have also proved that the AD limitation on allowed object searches is not the cause, we changed that from 1000 to 50,000 to prove the point to Mitel.

 

[MitelAU]

http://www.petri.co.il/anonymous_ldap_operations_in_windows_2003_ad.htm

Knowledge is power, thats why we share!

 

[MitelMate]

Thanks, I'll pass this to the AD administrator and I'll let you know if it's the fix.

 

[MitelMate]

This problem was fixed by increasing the allowed amount of AD Objects searched during an LDAP lookup to 50000, it had defaulted to 1000 after the AD server was migrated to win2003 from win2000.