LDAP:error code 11 - Administrative Limit Exceeded

[former_member188498]

Hi,

when searching for users with * in User Administration I receive a following message:

"Last search might be inaccurate". No element found

and the defaulttrace contains the following message:

LDAP:error code 11 - Administrative Limit Exceeded.

Maybe some settings from the LDAP side cause this error?

Any ideas how to fix this problem?

Regards,

Ladislav

[former_member188498]

Hi,

this error is not happening anymore.

The client probably changed some settings on the LDAP side.

Regards,

Ladislav

[Former Member]

Hi Ladislav,

Assuming you are using Active Directory as your LDAP then it is limited to return only 1000 results and since JNDI doesn't support paging you get this error.

Microsoft recommends leaving this value on 1000 and not changing the LDAP policy however you can increase it by changing the MaxPageSize property on LDAP. You can find a HowTo guide [here|http://support.microsoft.com/kb/315071/]

Hope it helps,

Roy

[former_member188498]

Hi Roy,

thanks.

I have also tried implementing sap note 936775 - Who is Who limitation on LDAP, but it didn't help,

paging is not working.

Regards,

Ladislav

[Former Member]

Have you increased MaxPageSize on the LDAP?

[former_member188498]

Hi Roy,

I haven't done that yet, unfortunately I don't have direct access to the LDAP.

I didn't mention it before, but the same error happens when indexing ume index - users from this production LDAP are not indexed.

When the portal is connected to the test LDAP they are indexed correctly.

I have asked our customer to check the MaxPageSize settings and to find out if there are any differences in configuration between the test and production LDAP systems.

Regards,

Ladislav

[Former Member]

Hello,

Try keeping the page size from SAP side and keep the limit to 500 so that SAP application will fetch the data from LDAP page by page with page size 500 and will give you complete output.

Regards

Manoj

[Former Member]

Manoj,

That won't help, as long as the LDAP is restricted to 1000 results it will simply bring 2 pages instead of one per query.

Roy