ldap allow-multiple-entries vs allow-multiple-dns

[Juan Manuel Díaz Nevado]

hi, i try to configure ldap attribute repository for x509 authentication extra attributes. 

when i make a search in ldap it retriev 2 entries,  no matters if i put allow-multiple-entries or allow-multiple-dns or none of them.

I dont understand whats the function of this conf entries or if i need to configure something more to control what ldap entries the system choose or merge it values in attributtes or so...

Maybe with https://apereo.github.io/cas/6.3.x/configuration/Configuration-Properties-Common.html#ldap-search-entry-handlers ???

thanks :)