Currently, all searches of LDAP are sub-tree searches – i.e., the entire sub-tree under the base DN will be searched for results. Allow users to configure a flat search mode so that only the direct children under the base DN will be included in searches.
New section in LDAP docs:
ldap.searchFilter – the search filter that should be used when loading users. If this
property is not set, the default search will be for users that have the attribute specified by