Does anyone happen to know why "acl_mask: to value by" shows "" instead of the dn of the user passed to the "-D" option? The suggestions above work but I am still curious why the anonymous bind is occurring.
There is no way for the LDAP server to know that the connection claiming to be DN "X" is actually that DN until /after/ authentication occurs. Thus, until the point at which authentication is successful, the connection is treated as anonymous.
--Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>