Running NagiosXi 5.4.3, trying to add new user via AD

[jfoshier]

Trying to add a new user via AD but my display is limited to a subset of our AD for the users, see up to the Smiths for example.

[dwhitfield]

This assumes you are an AD admin. If you aren't, then you'll need to talk to your AD admin.

Please open up an administrative command prompt and run these commands on the domain controller to see what the settings are, this is what resolved it on mine:

ntdsutil.exe [enter]
ldap policies [enter]
connections [enter]
connect to server dc1.contoso.local [enter]
quit [enter]
show values [enter]


The part that we are interested in is the MaxPageSize settings, yours is probably set to 1000 so run this:

set maxpagesize to 5000 [enter]

Sounds like you probably don't need 5000, but that will give you some room to grow.

[jfoshier]

I performed the ntdsutil related commands, changed maxpagesize from 1000 to 5000, confirmed the setting and this did not make a difference, I still see the limited AD used up to Smith etc, the same actual user as before I reset the value.

[SteveBeauchemin]

This feels like a familiar issue. It may be that php is timing out before the list is completed.

I made these changes to my php.ini file. My system is able to list 18,000+ names on the AD page.

Code: Select all

vi /etc/php.ini
;;;;;;;;;;;;;;;;;;;
; Resource Limits ;
;;;;;;;;;;;;;;;;;;;

; max_execution_time = 30
max_execution_time = 120

; max_input_time = 60
max_input_time = 180

; memory_limit = 128M
memory_limit = 512M

It is worth a try...

Steve B

[cdienger]

Thanks for pointing that out, Steve. I was thinking too that if it is limited to 1000 and it's still returning up to the same user that it was prior to the change, it could be a replication issue on the AD side and we may need to either wait for the change to actually apply or restart the domain service. https://blogs.technet.microsoft.com/qza ... r-2008-r2/ covers how to disable the limit altogether and recommends a restarting the domain service.

[jfoshier]

The first suggestion provided to alter maxpagesize worked once I committed the change at out forest level. Thanks much to the information dwhitfield provided.

[cdienger]

Glad to hear. Did you have any more questions related to this or are we safe to lock the thread?