Mac OS X OpenLDAP allows anonymous access to all fields