Hi, we have no problem using outlook to browse LDAP as you describe it. We have approximately 10000 entries in our LDAP. The only additional tuning we have made is the optimisation by VLV index and a little change in the ACI for the  VLV Request Control:<br>

<br><br># Replace ldap:///all (authentified users) by ldap:///anyone (everyone, including anonymous)<br># old aci: (targetattr != &quot;aci&quot;)(version 3.0; acl &quot;VLV Request Control&quot;; allow(read ,search, compare) userdn = &quot;ldap:///all&quot;;)<br>

dn: oid=2.16.840.1.113730.3.4.9,cn=features,cn=config<br>changetype: modify<br>replace: aci<br>aci: (targetattr != &quot;aci&quot;)(version 3.0; acl &quot;VLV Request Control&quot;; allow(read,search,compare) userdn = &quot;ldap:///anyone&quot;;)<br>

<br># Add a special index for Outlook VLV<br>dn: cn=Outlook Browse,cn=userRoot,cn=ldbm database,cn=plugins,cn=config<br>changetype: add<br>cn: Outlook Browse<br>objectClass: top<br>objectClass: vlvsearch<br>aci: (targetattr != &quot;aci&quot;)(version 3.0; acl &quot;VLV Request Control&quot;; allow(read,search,compare) userdn = &quot;ldap:///anyone&quot;;)<br>

vlvBase: ou=Users,dc=example,dc=com<br>vlvFilter: (&amp;(mail=*)(cn=*))<br>vlvScope: 2<br><br>dn: cn=Outlook Browse Index,cn=Outlook Browse,cn=userRoot,cn=ldbm database,cn=plugins,cn=config<br>changetype: add<br>cn: Outlook Browse Index<br>

objectClass: top<br>objectClass: vlvindex<br>aci: (targetattr != &quot;aci&quot;)(version 3.0; acl &quot;VLV Request Control&quot;; allow(read,search,compare) userdn = &quot;ldap:///anyone&quot;;)<br>vlvEnabled: 1<br>vlvSort: cn<br>

<br><br>@+<br><br><div class="gmail_quote">2009/11/5 Chris Bryant <span dir="ltr">&lt;<a href="mailto:cbryant-ical@corp.usa.net">cbryant-ical@corp.usa.net</a>&gt;</span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">







<div bgcolor="#ffffff">
<div><font face="Arial" size="2">
<div>
<div>
<div><font face="Arial" size="2">
<p>When configuring Microsoft Outlook (not Outlook Express) to access an LDAP 
directory, there is an option to &#39;Enable Browsing (requires server 
support)&#39;.  If this option is chosen and the directory server supports it, 
then you should be able to open the LDAP address book and page up and down 
through the results.  I have been unable to get this working properly with 
389 DS.</p>
<p>When I try to browse from Outlook against the 389 DS directory, I am able to 
see the first page of results perfectly.  However, if I move to the next 
page, only the first object returned will have any attributes included, and all 
of the rest of the objects in the page will have no attributes.  I have a 
test perl script that duplicates this functionality as well.</p>
<p>I can get this to work properly with an older version of Netscape Directory 
Server, and I can get it working with OpenDS.  Since 389 DS advertises 
support for the controls that are required for this to work, just like the other 
two servers, then I would expect it to work there also.</p>
<p>Has anyone out there gotten this to work with 389 DS?  If so, can you 
share if there was anything special that you needed to do to get this to 
work?  I&#39;m trying to determine if this is a bug in the server, or if I&#39;m 
just missing something in the configuration.</p>
<p>Thanks,<br>Chris</p></font></div></div></div></font></div>
<br><font color="black" face="Arial" size="2">

<b>

<font size="5"><font color="#848484">USA</font><font color="#9a092a">.</font><font color="#181715">NET</font></font></b><br>

<b><span style="font-size: 9pt;">You Run Your Business.  We&#39;ll Run Your Email.<sup>®</sup></span></b><br> <br>

<p><span style="font-size: 9pt;">This message is for the sole use of the intended recipient(s) and may contain confidential and/or privileged information of <a href="http://www.usa.net/" target="_blank">USA.NET</a>, Inc.  Any unauthorized review, use, copying, disclosure, or distribution is prohibited.  If you are not the intended recipient, please immediately contact the sender by reply email and delete all copies of the original message.</span></p>

</font>


<br></div>
<br>--<br>
389 users mailing list<br>
<a href="mailto:389-users@redhat.com">389-users@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/fedora-directory-users" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-directory-users</a><br>
<br></blockquote></div><br>