Java library available to read and update Active Directory ntSecurityDescriptor attribute.
As you should know, each ldapsearch line output is wrapped: the max size of a line output is of 79 characters. By the way, as is so often the case, ldapsearch output is retrieved to be automatically processed by a script or something else: in these cases the line wrapping usually is a big problem.
Asking for a large set of results via ldapsearch to an Active Directory (AD) you will get a "size limit exceeded" error message. Searches of Active Directory performed without paging are limited to returning a maximum of the first 1000 records.