What you want is not possible with a simple bind (bind as a user without
providing a password).  You could use something like client certificate
authentication (SASL/EXTERNAL).

Regards,
Quanah