Your domain’s security realm has two authentication provides: ldap1 and ldap2.

Consider these requirements:

• If authentication succeeds with ldap1, then skip ldap2.

• If authentication fails with ldap1, then authentication must succeed with ldap2.

Which control flag should you use for ldap1?