guillaume.pujol@eds.com wrote:

idassert-bind bindmethod=simple mode=self

This line makes no sense. In fact, it assumes an empty DN ("anonymous") can authorize users. This idassert-bind statement should be invalid.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando@sys-net.it -----------------------------------