This optional parameter specifies the maximum number of matching LDAP records to use for check and reply items. Default is 1 to be backwards compatible with earlier versions of AuthBy LDAP2. Only the first match (if any) is used for ServerChecksPassword. This parameter can be used to extract additional check and reply items from LDAP records that define user roles.