Can anyone point me to a resource that defines the maximum allowable length of the LDAP filter string in Active Directory?
任何人都可以指向我定义Active Directory中LDAP过滤器字符串的最大允许长度的资源吗?
3 个解决方案
#1
According to Technet: How Active Directory Searches Work, the maximum LDAP request size that the server attempts to process defaults to 10,485,760 bytes.
根据Technet:Active Directory搜索的工作原理,服务器尝试处理的最大LDAP请求大小默认为10,485,760字节。
If the server receives a request that is larger than this value, it closes the connection. Hope that helps.
如果服务器收到大于此值的请求,则会关闭连接。希望有所帮助。
#2
If you're using the AD Users and Groups GUI interface to contruct the query you are limited to 464 characters. If you're using dsquery from the command line you are not limited to 464 characters. I don't know the upper bounds for filter length on dsquery, but I assume it's inline with the LDAP spec.
如果您使用AD用户和组GUI界面来构建查询,则限制为464个字符。如果您从命令行使用dsquery,则不限于464个字符。我不知道dsquery上的过滤器长度的上限,但我认为它与LDAP规范一致。
#3
According to the specification in RFC1558, there is not a hard limit imposed on the length of LDAP filter strings. Different implementations might have their own limits though.
根据RFC1558中的规范,对LDAP过滤器字符串的长度没有硬性限制。但是,不同的实现可能有自己的限制。
#1
According to Technet: How Active Directory Searches Work, the maximum LDAP request size that the server attempts to process defaults to 10,485,760 bytes.
根据Technet:Active Directory搜索的工作原理,服务器尝试处理的最大LDAP请求大小默认为10,485,760字节。
If the server receives a request that is larger than this value, it closes the connection. Hope that helps.
如果服务器收到大于此值的请求,则会关闭连接。希望有所帮助。
#2
If you're using the AD Users and Groups GUI interface to contruct the query you are limited to 464 characters. If you're using dsquery from the command line you are not limited to 464 characters. I don't know the upper bounds for filter length on dsquery, but I assume it's inline with the LDAP spec.
如果您使用AD用户和组GUI界面来构建查询,则限制为464个字符。如果您从命令行使用dsquery,则不限于464个字符。我不知道dsquery上的过滤器长度的上限,但我认为它与LDAP规范一致。
#3
According to the specification in RFC1558, there is not a hard limit imposed on the length of LDAP filter strings. Different implementations might have their own limits though.
根据RFC1558中的规范,对LDAP过滤器字符串的长度没有硬性限制。但是,不同的实现可能有自己的限制。