...
Full syncs are dependent on the LDAP server having sufficiently high search limits to allow the full directory to be read, or for binding to be performed with a Bind DN with unlimited search permission.
Wildcards are not supported in searches (though they are supported in the Search Filter). All searches will be prefix searches (ie: foo*).