14.13 Configuring Permissive Modify

The current LDAP modify operation can be extended by setting the ldapPermissiveModify option to TRUE. If you attempt to delete an attribute that does not exist or to add any value to an attribute that already exists, the operation goes through without displaying any error message.

LDAP Configuration in Identity Console

  1. On the NetIQ Identity Console, click LDAP Configuration tile.

  2. Click LDAP Servers.

  3. Click Others drop down menu > select LdapPermissiveModify check box, click Save then click OK.

ldapconfig Utility

ldapconfig set "ldapPermissiveModify=yes/no" -a <admin-FDN> -w <admin-password">