c# – 分页AD查询有时失败

System.DirectoryServices.Protocols.DirectoryOperationException: The server does not support the control. The control is critical.
   at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request,TimeSpan requestTimeout)

>当它成功运行时,整个过程大约需要一分钟才能运行,AD查询大约需要30秒,32页.
>当它失败时,它始终在第一页上.
>就我所知,它似乎没有在一个模式中失败(总是在一天的不同时间).

在谷歌搜索该错误后,我发现了两个SO问题(one,two),指向使用AuthType.Ntlm来解决问题.但这对我来说并没有解决. Another说检查服务器是否支持分页(确实如此).

关于为什么会发生这种情况的任何想法？

var attributesToReturn = new[] {
    "givenName","sn","middleName","extensionAttribute8","department","sAMAccountName","userAccountControl"
};
var filter = "(&(objectclass=user)(!(objectclass=computer))(sn=*)(givenName=*)(extensionAttribute8=*)(|(sn=a*)(sn=b*)(sn=c*)(sn=d*)(sn=e*)(sn=f*)(sn=g*)(sn=h*)(sn=i*)(sn=j*)(sn=k*)(sn=l*)(sn=m*)(sn=n*)(sn=o*)(sn=p*)(sn=q*)(sn=r*)(sn=s*)(sn=t*)(sn=u*)(sn=v*)(sn=w*)(sn=x*)(sn=y*)(sn=z*)))";
var currentBatch = 1;
var searchRequest = new SearchRequest("DC=foo,DC=bar,DC=baz",filter,SearchScope.Subtree,attributesToReturn);
var pageRequestControl = new PageResultRequestControl(500);
searchRequest.Controls.Add(pageRequestControl);

using (var ldapConnection = new LdapConnection("server.foo.bar.baz"))
{
    ldapConnection.Credential = new NetworkCredential("user","pass","domain");
    ldapConnection.Timeout = new TimeSpan(0,4,0);
    ldapConnection.AuthType = AuthType.Ntlm; // https://stackoverflow.com/a/14255413

    while (true)
    {
        log.Debug("Fetching batch {0} from AD",currentBatch);
        var searchResponse = (SearchResponse)ldapConnection.SendRequest(searchRequest);
        var pageResultResponse = (PageResultResponseControl)searchResponse.Controls[0];

        log.Debug("Parsing AD response for batch {0}",currentBatch);
        ParseResponse(_return,searchResponse,includeDisabled);
        if (pageResultResponse.Cookie.Length == 0)
            break;
        pageRequestControl.Cookie = pageResultResponse.Cookie;
        currentBatch++;
    }
}