Will disable_list_acids Disable Search All Searches?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit
• Top Secret
• Top Secret - LDAP

Issue/Introduction

We are using CA LDAP Server for Z/OS to plug Siteminder to our Z/OS user store and to authenticate our users on it.

CA Siteminder crashed CA LDAP Server plugin because it issued an ldapsearch to retrieve all acids.

We use the parameter disable_list_acids in the slapd.conf file to disable the ldapsearch to retrieve all acids.

Can you assure me that this parameter will be block every possible way of doing User search in CA LDAP Server?

 

 

Environment

Release:
Component: LDAPDV

Resolution

The CA LDAP slapd.conf file parameter disable_list_acids will prevent the ldapsearch command (to retrieve all acids) from executing.