ignore-suffix

This stanza entry specifies the LDAP server suffix that is to be ignored when searching for user and group information.

ignore-suffix = suffix_dn

LDAP server suffix that is to be ignored when searching for user and group information. By default, all defined suffixes in the LDAP server are searched when acquiring User and group information. This stanza entry can be used only in the ldap.conf configuration file.

Options

suffix_dn
Specifies the suffix distinguished name (DN) that we want to be ignored. Repeat this stanza entry for each suffix we want to be ignored. For example, if you specify ignore-suffix = o=tivoli,c=us, any user, or group that includes o=tivoli,c=us as part of the DN is ignored.

Usage

Optional

Default value

All defined suffixes are searched.

Example

ignore-suffix = o=tivoli,c=us

Parent topic: [ldap] stanza for ldap.conf