--On Thursday, December 15, 2016 9:37 PM +0000 yelin@venustech.com.cn wrote:
To be specific, "allow bind_anon_cred" in slapd.conf does not work as
Hello,
This report is invalid. The documentation clearly states:
bind_anon_cred allows anonymous bind when credentials are not empty (e.g. when DN is empty).
I.e., bind_anon_cred allows you to bind with a ldapsearch -W or -w flag, but no -D flag provided.
You may be looking for:
bind_anon_dn allows unauthenticated (anonymous) bind when DN is not empty.
Which allows one to bind anonymously rather than as a user, if the DN is specified.
I.e., if using ldapsearch, ldapsearch -D DN without a -W or -w would allow the bind to occur as an anonymous connection.
Hope that helps.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com