Hey Bob,
What you want is probably pointer COS:
https://docs.redhat.com/en/documentation/red_hat_directory_server/11/html-single/administration_guide/index#About_CoS-How_a_Pointer_CoS_Works
The issue with this is it works for all entries under a subtree. There
is no filtering. So you can apply it to all users under
ou=people,dc=example,dc=com by creating the COS definition entry
directly under that branch.
Not sure if this will work for you, but it's all we got at the moment.
HTH,
Mark
On 12/24/25 12:55 PM, Bob Green via 389-users wrote:
I have a group of 389ds accounts that all need to return query results
beyond the default administrative limit. I was hoping I might apply
nsSizeLimit and nsLookThroughLimit -1 to the OU where all the accounts
reside and have that setting inherited by the accounts residing
underneath. This does not seem to work, so I tried to create a group
that would have as members the accounts that need to exceed the admin
limit and where the size and look through limits were applied. This
doesn't work either. I don't want to modify the default global
setting and was hoping to avoid having to apply the limit settings to
each account. Is there a way to apply these admin limit increases to
a group of accounts without having to make the changes to each
account?
Bob
--
Identity Management Development Team
--
_______________________________________________
389-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
