The set exclude-address command specifies a list of IP addresses for which to refuse LDAP/DAP binds.
This command has the following format:
set exclude-addresses = [ipv4 | ipv6] address [, …] | none
Specifies a list of IP addresses for which you want to refuse LDAP/DAP binds. Use a comma-separated list of IPv4 or IPv6 addresses. You can specify that no addresses are blocked, for example, set exclude-addresses = none.
If multiple exclusions are defined in the configuration files, only the last one takes effect.
Important! Use host names which can be resolved, or use IP addresses. If you provide a name that cannot be resolved, the DSA cannot start, and an init aborts the DSA.
| Copyright © 2009 CA. All rights reserved. | Email CA about this topic |