Configuring LDAP with Novell eDirectory
By default, Novell eDirectory allows anonymous users to browse user accounts. However, only users with special permissions are able to see whether another user account is disabled. To use custom user validation filters, the Authentication Service must be configured with privileged LDAP credentials.
An eDirectory account is considered disabled when the loginDisabled attribute is set to TRUE. Use the following user validation filter to prevent users with disabled accounts from refreshing their session credentials:
(!(loginDisabled=TRUE))
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*