quanah(a)OpenLDAP.org writes:
For example, I may want to block subfinal indices on the
"suAffiliation" attribute in the cn=people,dc=stanford,dc=edu tree.
I should have added: Unless you've got a better answer than me for
why this is better than the "unchecked" limit, it might be more
useful to block "suAffiliation" from getting a "subfinal" index.
Then use the "unchecked" limit to block too general searches.
--
Regards,
Hallvard