diff --git a/install/updates/10-config.update b/install/updates/10-config.update
index dec42c025..403476687 100644
--- a/install/updates/10-config.update
+++ b/install/updates/10-config.update
@@ -16,7 +16,7 @@ only: nsslapd-pluginPrecedence: 60
 # Set limits to suite better IPA deployment sizes, defaults are too
 # conservative
 dn: cn=config
-default: nsslapd-sizelimit:100000
+replace: nsslapd-sizelimit:2000::100000
 
 dn: cn=config,cn=ldbm database,cn=plugins,cn=config
 replace: nsslapd-lookthroughlimit:5000::100000
diff --git a/ipapython/ipaldap.py b/ipapython/ipaldap.py
index c06cdffb5..ed3d3aefa 100644
--- a/ipapython/ipaldap.py
+++ b/ipapython/ipaldap.py
@@ -765,6 +765,7 @@ class LDAPClient:
         'nsslapd-logging-hr-timestamps-enabled': True,
         'nsslapd-ldapientrysearchbase': True,
         'nsslapd-ldapidnmappingbase': True,
+        'nsslapd-sizelimit': True,
     })
 
     time_limit = -1.0   # unlimited