LDAP: Only the first 1000 groups are selectable for role to group mapping

[tfischer77]

Steps to reproduce

1. Install Teampass to the latest Master
2. Configure LDAP authentication with Active Directory

LDAP Configuration

Hosts: 10.146.149.180
LDAP Port: 389
Base DN: DC=automation,DC=cilag,DC=intern
Username: CN=ADS Read,OU=XYZ,,DC=my,DC=domain,DC=com
Password: abcde
User Distinguished Name: distinguishedname
User name attribute: samaccountname
Additional User DN:
User Object Filter: (memberof=CN=Teampass-User,OU=TeamPass,OU=XYZ,DC=my,DC=domain,DC=com)
AD Group ObjectClasses attribute: top,group
LDAP server type: Active Directory
Local and LDAP users: No
AD user roles mapped with their AD groups: Yes
LDAP GUID attribute: objectguid

Expected behaviour

As there is no group filter configurable in the dialog, all AD groups should be visible.

Actual behaviour

Only the first 1000 groups are shown.

Server configuration

Operating system:
Debian 12.7
Web server:
Apache 2.4.62
Database:
10.11.6-MariaDB-0+deb12u1
PHP version:
PHP Version 8.2.20
Teampass version:
Master from Github (Oct 16, 2024)
Teampass configuration file:
// DATABASE connexion parameters
define("DB_HOST", "localhost:3306");
define("DB_USER", "teampass");
define("DB_PASSWD", "XXXXX");
define("DB_NAME", "teampass");
define("DB_PREFIX", "teampass_");
define("DB_PORT", "3306");
define("DB_ENCODING", "utf8");
//define("DB_SSL", false); // if DB over SSL then comment this line
// if DB over SSL then uncomment the following lines
define("DB_SSL", array(
"key" => "",
"cert" => "",
"ca_cert" => "",
"ca_path" => "",
"cipher" => ""
));
define("DB_CONNECT_OPTIONS", array(
MYSQLI_OPT_CONNECT_TIMEOUT => 10
));
define("SECUREPATH", "/var/local/teampass");
define("SECUREFILE", "teampass-seckey.txt");
define("IKEY", "");
define("SKEY", "");
define("HOST", "");

if (isset($_SESSION['settings']['timezone']) === true) {
date_default_timezone_set($_SESSION['settings']['timezone']);
}

Client configuration

Browser:
Google Chrome 129.0.6668.101
Operating system:
Windows 10

Logs

Web server error log

No error / log message shown

Log from the web-browser developer console (CTRL + SHIFT + i)

{error: false, teampass_groups: Array(4), ldap_groups: Array(1000)}

Possible solution

Groups are read in vendor/teampassclasses/ldapextra/src/ActiveDirectoryExtra.php
If I change lines 61 and 106 from get() to paginate(), all groups are visible inside Teampass.
$groups = $query->get(); change to: $groups = $query->paginate();

Could that be changed in the official master tree sources? Any better solutions available? Maybe setting an LDAP group filter somewhere?
Best regards,
Tim