adclient.user.lookup.cn

This configuration parameter specifies whether you want to allow users to be found by their common name (cn) attribute. The parameter value can be true or false.

By default, you can allow users to login using their UNIX profile name, Active Directory displayName, or Active Directory cn attribute. However, allowing users to log on using these additional attributes can require the agent to perform multiple searches to locate a user account in Active Directory. In environments with domain controllers under heavy load or with large user populations, searching Active Directory multiple times might negatively impact performance.

If you want to prevent the agent from attempting to access to user information by the common name, you can set this configuration parameter to false. For example:

adclient.user.lookup.cn: false

The default value for Mac OS X computers is false.

The default parameter value for all other platforms is true.