Can I use ldap without anonymous bind?

weda · 07-17-2009, 10:42 AM

Hi I am new to ldap and I am planning to use openldap 2.4.

I have a question:

Is it possible to completely disable anonymous binds and still be able to use programs like pam, mail authentication and ftp. I dont want to allow the whole world to query my directory.I only want registered users to use it.

thank you.

scottro11 · 07-18-2009, 09:02 PM

Sure.

I have a page on ldap that might be useful.

http://home.roadrunner.com/~computertaijutsu/ldap.html

Depending upon the distribution, the default can be access to * by * read, which you probably don't want. See the section in the above link about access control. As mentioned in the article, it doesn't always work as expected, so after configuring access lists, do test it by running slapd -d 128 and testing. (As explained in the article.)