Policy Server Guides › Policy Design Guide › User Directory and Search Dialog Reference › User Directory Dialog › User Directory Dialog—LDAP Namespace › User Directory Dialog—LDAP Namespace—Directory Setup Tab › LDAP Search Group Box

LDAP Search Group Box

Root field

Location in the LDAP tree that the Policy Server uses as the starting point for the directory connection—typically, an organization (o) or organizational unit (ou). The Policy Server begins searching at the root when locating a user.

Note: Depending on the LDAP vendor, the root for an LDAP user store is represented in a number of ways.

Scope drop down list

Determines how far down the LDAP directory tree the Policy Server searches for users:

One Level

Indicates one level below the root.

Subtree

Specifies all levels below the root.

Max Time field

Defines the time in seconds passed by the Policy Server to the user directory after which the user directory stops searching for results.

After the specified amount of time, the user directory stops searching and returns matching records or an error.

Default: 30

Note: The timeout can also be configured through the user interface of your LDAP directory. If the timeout periods are different, the shorter timeout takes precedence. A zero (0) value is not supported. A zero value can lead to threads hanging indefinitely in the Policy Sever. Consider your system response time when setting a maximum value.

Max Results field

Maximum number of records that can be returned for a single search of the LDAP user directory.

The default value for this field is 0, which indicates there is no maximum limit on the number of records that can be returned for a single search of the LDAP user directory.

More information:

Configure User Directory Connections