Re: Must a simple bind with DN and no pwd be treated as anonymous?

[Ludovic Poitou <ludovic.poitou@france.sun.com>]

This is described in the RFC2251 page 22.
Zero length password means no authentication (anonymous mode).
"Typically the DN is also of zero length". But it does mandate that it is.

I hope this helps.

Ludovic.


Sam Johnson wrote:

> While trying to implement a PAM-module for Solaris I have discovered
> that the Sun Directory Server aka LDAP server treats a simple bind with
> DN and a null (missing) password as an anonymous bind.  The documentation
> for the Netscape Directory SDK API also documents this behaviour.  So,
> do the RFC's suggest or require this, or is the matter still open to
> discussion and complaint (and modification)?
>
> Thanks for reading this.
>
> Sam Johnson                             Sam.Johnson@FernUni-Hagen.de
> ------------------------------------------------------------------------------
> FernUniversitaet                        Phone: +49-2331-987-2874,-2799
> 58084 Hagen, Germany                    Fax:   +49-2331-987-2720

--
Ludovic Poitou
Sun Microsystems Inc.
Sun-Netscape Alliance - Directory Group - Grenoble - France