Page 1 of 1
Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Mon Apr 03, 2017 3:13 pm
by jfoshier
Trying to add a new user via AD but my display is limited to a subset of our AD for the users, see up to the Smiths for example.
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Mon Apr 03, 2017 3:26 pm
by dwhitfield
This assumes you are an AD admin. If you aren't, then you'll need to talk to your AD admin.
Please open up an administrative command prompt and run these commands on the domain controller to see what the settings are, this is what resolved it on mine:
ntdsutil.exe [enter]
ldap policies [enter]
connections [enter]
connect to server dc1.contoso.local [enter]
quit [enter]
show values [enter]
The part that we are interested in is the MaxPageSize settings, yours is probably set to 1000 so run this:
set maxpagesize to 5000 [enter]
Sounds like you probably don't need 5000, but that will give you some room to grow.
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Tue Apr 04, 2017 6:02 am
by jfoshier
I performed the ntdsutil related commands, changed maxpagesize from 1000 to 5000, confirmed the setting and this did not make a difference, I still see the limited AD used up to Smith etc, the same actual user as before I reset the value.
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Tue Apr 04, 2017 1:57 pm
by SteveBeauchemin
This feels like a familiar issue. It may be that php is timing out before the list is completed.
I made these changes to my php.ini file. My system is able to list 18,000+ names on the AD page.
Code: Select all
vi /etc/php.ini
;;;;;;;;;;;;;;;;;;;
; Resource Limits ;
;;;;;;;;;;;;;;;;;;;
; max_execution_time = 30
max_execution_time = 120
; max_input_time = 60
max_input_time = 180
; memory_limit = 128M
memory_limit = 512M
It is worth a try...
Steve B
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Tue Apr 04, 2017 2:11 pm
by cdienger
Thanks for pointing that out, Steve. I was thinking too that if it is limited to 1000 and it's still returning up to the same user that it was prior to the change, it could be a replication issue on the AD side and we may need to either wait for the change to actually apply or restart the domain service.
https://blogs.technet.microsoft.com/qza ... r-2008-r2/ covers how to disable the limit altogether and recommends a restarting the domain service.
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Thu Apr 06, 2017 8:10 am
by jfoshier
The first suggestion provided to alter maxpagesize worked once I committed the change at out forest level. Thanks much to the information dwhitfield provided.
Re: Running NagiosXi 5.4.3, trying to add new user via AD
Posted: Thu Apr 06, 2017 9:33 am
by cdienger
Glad to hear. Did you have any more questions related to this or are we safe to lock the thread?