LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Administering LDAP-UX Client Services
Considering Performance Impacts
Chapter 4118
NOTE The search time limit set during the setup procedure specifies the search
timeout on the client side. To service enumeration requests, this
parameter may need to be adjusted accordingly.
1. On your domain controller, click Start, then Run.
In the Open box, enter ntdsutil, then click OK.
2. Enter ldap policies, and then press the Enter key. You can enter
the ? symbol at any of the prompts in the ntdsutil tool to see a list
of available commands.
3. Enter connections, and then press the Enter key.
4. Enter connect to server <servername> , where <servername> is
the name of server you want to use, and then press the Enter key.
5. At the server connections: prompt, enter quit, and then press the
Enter key.
6. Enter set maxpagesize to <size> , where the <size> is the
maximum number of search objects that you want the Active
Directory to return for a search, and then press the Enter key.
7. Enter set maxqueryduration to <time> , where the <time> is the
maximum number of seconds to wait for a search request to
complete, and then press the Enter key.
8. Enter show values then press the Enter key. This verifies the new
values are set correctly.
9. Enter Commit Changes, and then press the Enter key.
10. Enter quit then press the Enter key to quit ldap policies.
11. Enter quit then press the Enter key to quit ntdsutil.
Search Filter
If enumeration requests cannot be avoided, consider the use of
customized search descriptors for each of your name services.
Customized search descriptors can improve enumeration cases because
it limits the search only to the paths (containers) where the required
data resides.