On Wednesday, 1. October 2014 18:47:12 Stefan Recksiegel wrote:
> When querying an AD server for a group with more than 1500
> members, the server does not give back a "member" attribute,
> but instead it gives a ranged member-attribute with the first
> 1500 entries. To get the rest of the members, the server has
> to be queried with a special attribute. All this is correctly
> explained in the FAQ, but the code is wrong in this line:
> attrs => ($index > 0) ? "member;range=$index-*" : 'member'
> attrs always need to be an array (at least in the recent version
> of perl-ldap that I am using), and when giving attrs as above,
> the server just keeps sending the first 1500 entries and the
> script loops. The line should read
> attrs => [ ($index > 0) ? "member;range=$index-*" : 'member' ]
Thanks for reporting the issue.
The fix will be in the next release of perl-ldap.