Can you control alias dereferencing for LDAP queries being performed by IPP
services?

I've been trying to set up iPrint delivered printing in our production tree
after testing it in a development tree. I was getting failures to upload
drivers to the broker but client 4.06 solved this problem. However, I was
still failing to authenticate when creating print driver profiles and
DSTRACE indicated that duplicates were being returned on the LDAP search

LDAP: [2005/07/25 10:30:43] Connection 0x65b1f9a0 closed
LDAP: [2005/07/25 10:31:06] Sending operation result 0:"":"" to connection
0x65b
1f7e0
LDAP: [2005/07/25 10:31:13] DoSearch on connection 0x65b1f7e0
LDAP: [2005/07/25 10:31:13] Search request:
base: "O=Gla"
scope:2 dereference:3 sizelimit:0 timelimit:0 attrsonly:0
filter: "(&(objectClass=user)(uid=kennys))"
no attributes
LDAP: [2005/07/25 10:31:13] Empty attribute list implies all user attributes
LDAP: [2005/07/25 10:31:13] Sending search result entry
"cn=kennys,ou=Mech,ou=En
gineering,o=Gla" to connection 0x65b1f7e0
LDAP: [2005/07/25 10:31:14] Sending search result entry
"cn=kennys,ou=Mech,ou=En
gineering,o=Gla" to connection 0x65b1f7e0
LDAP: [2005/07/25 10:31:32] Work info status: Total:1 Peak:1 Busy:0
LDAP: [2005/07/25 10:31:32] Thread pool status: Total:5 Peak:5 Busy:4

Testing a similar search using the OpenLDAP ldapsearch utility only one
entry was returned. Then I noticed that the search from the IPP server was
using alias dereferencing and while we have no aliases on usernames we have
some aliases on organisational units in our tree e.g.

Mechanical.Engineering.Gla is an alias for Mech.Engineering.Gla

Switching on alias dereferencing in the OpenLDAP search with "-a search"
exhibited the same duplicate return. Replicating the existance of the
aliases in the test tree exhibited the same failure to authenticate.

My question is can you control alias dereferencing for LDAP queries being
performed by IPP services? There appears to be a way to control this for
some versions of mod_auth_ldap using the "LDAP_Deref NEVER" directive but
this doesn't seem to be applicable for the version shipped with NW6.5SP3.

I notice some other DSTRACE postings haven't got dereference:3 , maybe it
changes across revisions, I'm running NW6.5SP3/iManager2.5/NDPS 4.0.3.

Regards

Kenny