Hi,

I'm trying to sync a group which contains more than 60000 users from
im3 to AD. But got following error and it keeps on re-synchronizing this
group:

[05/25/10 11:13:05.164]:Active Directory Driver ST:
DirXML Log Event -------------------
Driver: \IM3-PROD\uoa\srv\IDM Drivers\Active Directory Driver
Channel: Subscriber
Status: Retry
Message: Code(-9006) The driver returned a "retry" status
indicating that the operation should be retried later. Detail from
driver: <ldap-err ldap-rc="11" ldap-rc-nam
e="LDAP_ADMIN_LIMIT_EXCEEDED">
<client-err ldap-rc="11"
ldap-rc-name="LDAP_ADMIN_LIMIT_EXCEEDED">Administration Limit
Exceeded</client-err>
<server-err>00002024: SvcErr: DSID-031A0F6E, problem 5008
(ADMIN_LIMIT_EXCEEDED), data 0
</server-err>
<server-err-ex win32-rc="8228"/>
</ldap-err>

I didn't put level 3 trace log here because it's pretty huge. I read
following article:

'Active Directory Integration Tuning'
(http://technet.microsoft.com/en-us/l...CHG.65%29.aspx)

It mentions to increase the value of MaxActiveQueries on AD side but
there might be some side effects for doing this.

Could anyone suggest if we should increase that value on AD and what
the value to use?

Thanks,
Jes.


--
dqu002jes
------------------------------------------------------------------------
dqu002jes's Profile: http://forums.novell.com/member.php?userid=56660
View this thread: http://forums.novell.com/showthread.php?t=411389