Controls allow the LDAP protocol to be extended without changing theprotocol itself. This article provides information about some important controlsimplemented by IBM Tivoli Directory Server. It describes what controls are,and presents the API portion of JNDI which deals with them. With the help of examples, starring the Tree Delete Control and the Password Policy Control, it demonstrates how to employ controls in arbitrary Java components using JNDI.