URGENT : EP LDAP Search Problem

Question

Guys....any inputs ?????
Dear Portal Gurus,
We have connected LDAP To EP 6.0 SP12.
LDAP is ADS 2003 with two forests.(Deep Hierarchy)
I have created a XML config file for LDAP (UME Config. file) which connects to both the forests.
Everything works fine except when I navigate to Groups (say GROUPABC) and then from inside the group search for a USER (say USER001)who shows up as being in that group from a LDAP Browser (like Softerra) the search does NOT result in any match.
The group displays only 200 users even though there are more than 5000 users in it.The message we get is " the search hit is limited to 200 hits."
This user (USER001) does NOT show up in those 200 users.Now if I search for another user (say USER002) who is not in those 200 users but can be still seen from LDAP Browser (exactly like the last user I.E. USER001),that user (002) is being found as a result of a search from inside that group (GROUPABC).
There is a parameter in UME Properties file where we can change the max. search hits value from 200 to anything.
Will changing this value make EP to find USER001 in groupABC.
Pls note when USER001 and USER002 are searched as USERs (search users link) in EP they are seen to be assigned to the group GROUPABC.
Am told that windows has a limitation of showing only 1500 users inside a group.
To summarise :  <b>my questions are :
1) How to find USER001 from inside GROUPABC  &
2) How to display more than 1500 users inside that
   GROUP in EP.</b>
Greatly appreciate your inputs.
Thanks.
Josh
Message was edited by: Josh Mannings
Message was edited by: Josh Mannings

Answer 1

Hi,
What you can do is
Go to -->config tool.bat
-->click on pencil icon
-->cluster_data
-->server
-->cfg
-->services
-->property sheet of com.sap.security.core.ume.service
-->find the property ume.superadmin.activate = TRUE
Now logon to your portal with admin credentials and once you logged in again come here and make this property = FALSE
This is known as SAP* user
NOTE: Please keep atleast one user with super admin role assigned when such thing happens again so that you can unlock it from portal itself and your work wont get stopped.
Regards,
Ameya