--On Thursday, December 15, 2016 9:37 PM +0000 yelin(a)venustech.com.cn wrote: Hello, This report is invalid. The documentation clearly states: bind_anon_cred allows anonymous bind when credentials are not empty (e.g. when DN is empty). I.e., bind_anon_cred allows you to bind with a ldapsearch -W or -w flag, but no -D flag provided. You may be looking for: bind_anon_dn allows unauthenticated (anonymous) bind when DN is not empty. Which allows one to bind anonymously rather than as a user, if the DN is specified. I.e., if using ldapsearch, ldapsearch -D DN without a -W or -w would allow the bind to occur as an anonymous connection. Hope that helps. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>