This combination also works well on our very large AD:

 

ldap_idmap_range_min = 200000

ldap_idmap_range_max = 2000200000

ldap_idmap_range_size = 1000000

 

 

_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.