Limiting user discovery to LDAP users
After installing LDAP Tool Kit software, the administrator can limit the discovery of users to those defined in the LDAP data, via a new select menu that adds to the Messages > Users > Advanced screen. By default, this must first be enabled by the administrator to begin processing information. (The button appears only after enabling LDAP on the System > Tools > Auto-Update > LDAP screen.) This modification depicts as follows.
As shown in preceding image, the Require LDAP User Match field allows the administrator to require an LDAP User Match before you are adding automatically to the system. Specifically, when you are discovered, the list of excluded user names is tested, followed by the LDAP user list. When Require LDAP User Match is True, your name must not be excluded and must be in the LDAP list.
Related topic