[389-users] Re: how to apply increased search limits to a group of accounts?

Hey Bob,

What you want is probably pointer COS:

https://docs.redhat.com/en/documentation/red_hat_directory_server/11/html-single/administration_guide/index#About_CoS-How_a_Pointer_CoS_Works

The issue with this is it works for all entries under a subtree. There
is no filtering.  So you can apply it to all users under
ou=people,dc=example,dc=com by creating the COS definition entry
directly under that branch.

Not sure if this will work for you, but it's all we got at the moment.

HTH,

Mark


On 12/24/25 12:55 PM, Bob Green via 389-users wrote:
> I have a group of 389ds accounts that all need to return query results
> beyond the default administrative limit. I was hoping I might apply
> nsSizeLimit and nsLookThroughLimit -1 to the OU where all the accounts
> reside and have that setting inherited by the accounts residing
> underneath. This does not seem to work, so I tried to create a group
> that would have as members the accounts that need to exceed the admin
> limit and where the size and look through limits were applied. This
> doesn't work either. I don't want to modify the default global
> setting and was hoping to avoid having to apply the limit settings to
> each account. Is there a way to apply these admin limit increases to
> a group of accounts without having to make the changes to each
> account?
>
> Bob

--
Identity Management Development Team

--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue