Will disable_list_acids Disable Search All Searches?

Document ID : KB000048273
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

We are using CA LDAP Server for Z/OS to plug Siteminder to our Z/OS user store and to authenticate our users on it.

CA Siteminder crashed CA LDAP Server plugin because it issued an ldapsearch to retrieve all acids.

We use the parameter disable_list_acids in the slapd.conf file to disable the ldapsearch to retrieve all acids.

Can you assure me that this parameter will be block every possible way of doing User search in CA LDAP Server?

Solution:

Yes, the CA LDAP slapd.conf file parameter disable_list_acids will prevent the ldapsearch command (to retrieve all acids) from executing.