Re: Access-Control

["Mark Wilcox" <mark@mjwilcox.com>]

DN and null password will probably succeed as an anonymous access.

Mark
-----Original Message-----
From: Stuart Henderson <stuart@eclipse.net.uk>
To: Stefan Kiesow <Stefan.Kiesow@nwn.de>
Cc: OpenLDAP <openldap-general@OpenLDAP.org>
Date: Tuesday, August 03, 1999 11:40 AM
Subject: Re: Access-Control


>> Maybe I didn't understand it the right way, but are there 
>> only two ways to bind to the ldap-Sever: an anonymous and one 
>> via the root-dn + rootpw?
>
>No, you can also bind via a users DN and null password (which I believe
>is a reference bind, sometimes used to confirm that a user exists),
>which will not be useful for your purpose (and you should probably check
>that the password is not null before attempting the next one..), and
>a 'normal' bind with a user DN and password.
>
>HTH  Stuart
>
>