[Date Prev][Date Next]
RE: Why can I bind twice w & w/o a password?
> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Thomas Gagné
> I created a user, cn=Thomas Gagne,dc=home,dc=lan, and gave him a
> password of "homelife". I can successfully bind with and without a
> password. I was looking at the output from ethereal and the
> to successive bind requests (both with and without passwords) are
> success! Why would that be?
Just one of those weird quirks of the protocol. The protocol allows you to
Bind with a valid username and no password for informational/audit purposes.
The session is treated the same as an Anonymous session, the provided
username is logged (or not) and discarded. In current OpenLDAP releases these
password-less binds are disabled by default, and must explicitly be enabled
with "allow bind_anon_dn" in slapd.conf. You must be running an old release.
-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
Symas: Premier OpenSource Development and Support