Re: (ITS#5092) page size value of 1.2.840.113556.1.4.319 control

[randolf.werner@sap.com]

Hi,

oh my god what have i started here. Please don't try to convince me that
standards are important and slapd pricecly implents RFC 2696, i was
already convinced of that before i started the discussion. Anyway i like
to resond to Howard Chu because he mentioned something dangerous and
wrong regarding Active Directory (somewhat of topic here) but i like to
avaoid people following his suggestion:

Howard Chu <hyc@symas.com> wrote:
>> Here is why i believe others might run into the same issue. If you
need
>> to create a ldap client dealing with big search results for various
LDAP
>> directories you had to use 1.2.840.113556.1.4.319 even if you are
only
>> interested in collecting the entire result otherwise you would fail
with
>> Active Directory.
>
>Nonsense. You simply ask your AD administrator to raise the default
sizelimit, 
>the same way you would ask an OpenLDAP administrator to do the same
thing.

Well about 6 years ago when i first noticed this problem, i asked
Microsoft about that limit and yes you can use ntdsutil.exe to set
MaxPageSize to a higher limit:

http://support.microsoft.com/kb/315071/en-us

But it is strongly recommend to not change it!!!! Over the years i have
seen quite some Active Directories customers and many of them are very
afraid when you ask them you change some configuration or extending the
schema. In 2001 SAP's IT set MaxPageSize=10000 for a few weeks as a
temporary workaround until i was able to provide a real solution. That
was a long time ago and today SAP's and probably most other companies
Active Directories are running with default values.
1.2.840.113556.1.4.319 and MaxPageSize had not been invented to make our
life more difficult. A good article about it is e.g.
http://searchwinit.techtarget.com/tip/0,289483,sid1_gci1265206,00.html.
I like to close with Gary Olsen's conclusion "The best practice for
setting MaxPageSize is to leave it alone."

Best regards
    Randolf