Previous Topic: set dynamic-group CommandNext Topic: set force-encrypt-anon Command—Force Users to Use SSL on Anonymous Binds


set exclude-controls Command—Prevent LDAP Controls from Being Used

The set excluded-controls command prevents LDAP controls from being used. This setting is useful if you find that applications are causing problems with these controls.

set exclude-controls = [tree-delete], [virtual-list-view], [simple-paged-results];

When you use this command, the DSA no longer advertises support for the LDAP controls listed. In addition, if the DSA receives an excluded control request, it ignores the control.

Example: Exclude the tree-delete control

In this example, the directory administrator finds that an application has mistakenly used the tree-delete control to delete a large amount of data. The administrator sets the following command to prevent the problem happening again:

set exclude-controls = tree-delete;

More information:

Simple Paged Results Control

Tree Delete Control

Virtual List View (VLV) Control