Google Apps Directory Sync for Postini Services Administration Guide - Manual (Page 46)

Configuration 49
Scope This determines where in the LDAP directory this rule
applies. This could be an entire subtree, one level, or a
single object.
• Subtree: All objects matched by the search, and
anything under those objects. (recursive)
• One-level: All objects matched by the search, and
anything one level underneath them. Does not look
further than one level.
• Object: Only objects directly matched by the
search. No recursion of any kind.
Choosing which option to use:
Subtree gives the broadest search, but for very large
organizations this can be load-intensive and cause
system problems.
One-level provides a limited search that will avoid
causing extreme load for very large organizations.
Object is rarely used except with very complex LDAP
searches. It allows a search only on the specified
object.
Example: Subtree
Base DN The Base DN (Distinguished Name) to use for this
search rule. This will override the default Base DN you
specified in LDAP Connection.
This field is optional. In most cases, you can leave this
field blank and use the Base DN specified in the LDAP
Connection page. If you want this rule to use a different
Base DN than the default, specify an alternate base
DN.
Example:
ou=powerusers,ou=test,ou=sales,ou=melbourne,dc=
ad,dc=example,dc=com
LDAP User Sync
Setting
Description