If permissions are not given, user search cannot use the VLV, and the LDAP server throws a permission exception. NOTE As a convention, the vlvIndex entry name is also set to lcuser, but you can give it a different name.