user limit on active directory import?

[EUclides Junior]

Hi,
Is there any limitation in nxfilter regarding the amount of objects imported from the active directory user base? I ask this because I have a base with approximately 100.000 objects and nxfilter does not bring all the users, which means that some users cannot authenticate. Is it possible to force the import through the command line?

[support200]

We don't have any restriction for importing users from AD. What's your Base DN? Something like this 'cn=users,dc=nxfilter,dc=local'? Or do you have some OU?

You can try CxLogon and its 'Auto-register for New User' option if you want but try a different Base DN first.

[EUclides Junior]

Thanks for the answer.

I use vxlogon for wired network and radius for wifi and it works perfectly for users imported from active directory. However, the import is not bringing in all users from Active Directory and they are unable to authenticate.

My users are in OU. An education institute with several branches across the state. We have a single base of active directory organized into OUs. Then the search is done in the main OU for example:
domain: xpto.edu, OU=XPTO and below XPTO several branches with their users. Branch-A, Branch-B, Branch-C.

The search is done in: OU=XPTO,DC=xpto,DC=edu

[support200]

Can't you use 'cn=users,dc=xpto,dc=edu' or 'dc=xpto,dc=edu'? Might be working. There were several people having the same kind of problem with OU.

[EUclides Junior]

Unfortunately not because of how the active directory tree is organized. Users are in OU because they are grouped, logically isolated by institute and state. Within each branch are OUs for students, administrators, teachers, etc. Moving them all to cn=Users would lose this ordering plus all systems that query the Active Directory base are set to this hierarchy. Is there any way to force this import via the command line? What can I do manually?

[support200]

You can try it to see if you can import everyone.

Using CxLogon would be one way. Another way is to add the users not imported on 'Users > Mass Import' if you have the list of the users.