diff --git a/install/updates/10-config.update b/install/updates/10-config.update
index dec42c025..403476687 100644
--- a/install/updates/10-config.update
+++ b/install/updates/10-config.update
@@ -16,7 +16,7 @@ only: nsslapd-pluginPrecedence: 60
 # Set limits to suite better IPA deployment sizes, defaults are too
 # conservative
 dn: cn=config
-default: nsslapd-sizelimit:100000
+replace: nsslapd-sizelimit:2000::100000
 
 dn: cn=config,cn=ldbm database,cn=plugins,cn=config
 replace: nsslapd-lookthroughlimit:5000::100000
diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py
index 7d2b06eea..f94b784d6 100644
--- a/ipapython/ipaldap.py
+++ b/ipapython/ipaldap.py
@@ -763,6 +763,7 @@ class LDAPClient:
         'nsslapd-enable-upgrade-hash': True,
         'nsslapd-db-locks': True,
         'nsslapd-logging-hr-timestamps-enabled': True,
+        'nsslapd-sizelimit': True,
     })
 
     time_limit = -1.0   # unlimited