You cannot map an IP filter to a directory user. To apply IP filter restrictions to a directory user, you must:
- In a tdatIPFilterMember attribute for the filter, enter the DN of one of the following:
- tdatUser object to which the directory user is mapped
- the tdatUsers container object (applies the filter to all tdatUser objects)
- Directory users inherit the IP restrictions that apply to the tdatUser object to which they are mapped. If a directory user is not mapped to a tdatUser object, no IP restrictions apply. See Mapping Directory Users to Database Users.
Directory-based IP filters have no effect until you enable them in the system. See Enabling Directory-Based IP Restrictions with the ipdir2bin Utility.