When the LDAP entry creation mode option is disabled, this setting controls whether the Security Manager creates an LDAP entry for the user.

Value

Action

DO_OP_FAIL_IF_NOT_NEEDED

Perform the repository operation when needed, and fail if not needed.

DO_OP_SUCCEED_IF_NOT_NEEDED

Perform the repository operation when needed, and return success if not needed.

NO_OP

Omit the repository operation and do not check if the operation is needed.

NO_OP_FAIL_IF_NEEDED

Omit the repository operation, but fail if the operation is needed.

In the CA profile, certificate types as vpn_nodir  include the following master.certspec  advanced setting under [Extension Definitions].

noUserInDirectory=1

Mandatory: Yes.