LDAP dereferencing

Is there a way to turn off dereferencing in the LDAP authentication? Have tried as a guess in wildfire.xml but packet tracing reveals dereferencing is still “always”.