How to configire Maxpagesize in LDAP server to avoid a "The size limit was exceeded" or a "QVX_UNEXPECTED_END_OF_DATA" error message

[Andrea_Bertazzo]

A UDC don't work correctly. Users are not imported from LDAP because the task fails with a "The size limit was exceeded" or a "Error: QVX_UNEXPECTED_END_OF_DATA" message. This article report a step to fix the problem.

Environment

• Qlik Sense Enterprise on Windows 

Resolution

Here is a step-by-step instruction for one possible way of configuring Maxpagesize in LDAP server. We recommend to involve the LDAP server admins to do this.
Notice that value of Maxpagesize needs to be equal to or greater than the total number of users.

1. In LDAP server, go to "Run" and type "ntdsutil.exe" or "ntdsutil".
2. Command prompt will open up with ntdsutil tool active.
3. Type "ldap policies" and hit enter.
4. Type "connections" and hit enter.
5. Type "Connect to server [Servername]" and hit enter (servername is localhost if you are performing this within the ldap server).
6. Once you are successfully connected to server, type "q" and hit enter.
7. Type "Show values" and hit enter --> this will list all ldap policies and their values.
8. To edit any of these policies, type "Set [PolicyName] to [NewValue]" and hit enter.
9. Type "commit changes" and hit enter.
10. To verify your change is saved, type "Show values" again and hit enter.

This is how the commands will look like in the command prompt:

ntdsutil: ldap policies
ldap policy: connections
server connections: Connect to server [Servername]
Binding to [Servername] ...
Connected to [Servername] using credentials of locally logged on user server
connections: q
ldap policy: Show Values

Cause

This problem occurs because the size of the returned LDAP objects exceeds page size setting for Global Catalog in LDAP server config.It is necessary that the LDAP server admin checks the value set in the LDAP server. That value needs to be equal to or greater than the total number of users. It also has to be in line with the corresponding UDC setting, meaning Page size.
In general, it is also very useful to add a correct LDAP filter QMC's UDC settings in order to limit the size of the returned objects .

Internal Investigation ID(s)

QB-4558, QB-2982, QLIK-98759

[Filippo_Nicolussi_P]

Seems there are interesting hardcoded values starting from Windows 2008 to take into consideration:

https://learn.microsoft.com/en-US/troubleshoot/windows-server/identity/domain-controller-returns-500...