Re: Access Control and GUI clients

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 09:26 AM 2/10/2005, Alessandro Bottoni wrote:
>In all of these cases, the GUI client fails to bind as an authenticated user 
>and falls back to an Anonymous binding. Of course, OpenLDAP accepts to bind 
>with ldapadd and ldapsearch using the same username/password.
>
>Why OpenLDAP refuses to bind when contacted by a GUI client while it accepts 
>to bind to ldapadd and ldapsearch with the same user profile?

Well, either the GUI isn't doing the same kind of bind as
the OpenLDAP command line tools... or is misconfigured...
or is misused.

I suggest you enable and compare slapd logs to determine the
significant difference and then setup the GUI client (if possible)
not to be different in this regard.

>Is there any subtle difference between these two kind of bindings?

Well, slapd(8) cannot and doesn't distinguish one client
implementation from another.  There likely is a subtle
difference in what the clients are doing.