[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8551) allow bind_anon_cred in slapd.conf does not work

--On Thursday, December 15, 2016 9:37 PM +0000 yelin@venustech.com.cn wrote:

> To be specific, "allow bind_anon_cred" in slapd.conf does not work as

Hello,

This report is invalid.  The documentation clearly states:

bind_anon_cred allows anonymous bind when credentials are not empty (e.g. 
when DN  is
              empty).

I.e., bind_anon_cred allows you to bind with a ldapsearch -W or -w flag, 
but no -D flag provided.


You may be looking for:

bind_anon_dn  allows  unauthenticated (anonymous) bind when  DN  is  not 
empty.

Which allows one to bind anonymously rather than as a user, if the DN is 
specified.

I.e., if using ldapsearch, ldapsearch -D DN without a -W or -w would allow 
the bind to occur as an anonymous connection.

Hope that helps.

Regards,
Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>