DIRECTORY SERVICES

Configuring alias dereferencing in a Directory Assistance document for a remote LDAP directory
An alias entry in an LDAP directory is an entry that points to another entry. Searching the entry an alias entry points to is known as dereferencing an alias. Dereferencing aliases can cause poor search performance for some LDAP directories. Select one of the following options in the "Dereference alias on search" field in a Directory Assistance document for an LDAP directory to control the extent to which alias dereferencing occurs when searching the remote LDAP directory.
OptionDescription
NeverNever dereference alias entries. If there are no alias entries in the LDAP directory that require dereferencing, choose this option to improve search performance.
Only for subordinate entriesDereference alias entries subordinate to a specified search base, but do not dereference an alias search base entry.
Only for search base entriesDeference an alias entry for a specified search base, but do not dereference alias entries subordinate to the search base.
AlwaysAlways dereference aliases. This selection is the default behavior.

Example of alias dereferencing
Suppose an LDAP directory has these entries:

o=Acme1

o=Acme2 (alias entry that points to o=Acme1)

cn=John Doe, o=Acme1

cn=John Doe, o=Acme2 (alias entry that points to cn=John Doe, o=Acme1)

The following table describes which of these entries are returned for a subtree search of o=Acme 2 (o=Acme2 and subordinate entries) for each "Dereference alias on search" option.
OptionEntries returned
Nevero=Acme2

cn=John Doe, o=Acme2

Only for subordinate entrieso=Acme2

cn=John Doe, o=Acme1

Only for search base entrieso=Acme1

cn=John Doe, o=Acme2

Alwayso=Acme1

cn=John Doe, o=Acme1

See also