Configuring LDAP with Novell eDirectory
By default, eDirectory allows anonymous users to browse user accounts, but only users with special permissions are able to see whether another user account is disabled. To use custom user validation filters, the Authentication Service must be configured with privileged LDAP credentials.
An eDirectory account is considered disabled when its loginDisabled attribute is set to true. The following user validation filter can be used to prevent disabled users from refreshing their session credentials:
(!(loginDisabled=TRUE))
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*