If Encryption Management Server is configured to allow third parties to perform key searches using LDAP or LDAPS, by default it will allow wildcard searches and return the first 100 matches.
For example, a third party could search for a* and return the first 100 email addresses beginning with the letter A.
Symantec Encryption Management Server 10.5 and above.
Wildcard searches can be disabled by adding an entry to the /etc/ovid/prefs.xml file. In addition, the number of results returned can be reduced from the default of 100 by adding another entry to the /etc/ovid/prefs.xml file.
To disable wildcard searches and limit the results to 10, please do the following:
cp /etc/ovid/prefs.xml /etc/ovid/prefs.xml.bak
pgpsysconf --restart ldap