The proprietary exclude branch request control may be included in a search request to indicate that the server should exclude matching entries in one or more subtrees. The control has an OID of 1.3.6.1.4.1.30221.2.5.17, and it takes a value. The following fields may be present in the value-json representation of the value:

• base-dns: A mandatory array field whose values must be strings that represent the base DNs of the branches to exclude from search results.

The following sample shows the JSON encoding for the control:

{ 
    "oid":"1.3.6.1.4.1.30221.2.5.17",
  "control-name":"Exclude Branch Request Control",
  "criticality":false,
  "value-json":{ 
      "base-dns":[ "ou=excluded 1,dc=example,dc=com",
                              "ou=excluded 2,dc=example,dc=com"
        ] 
    } 
}