A workaround is adding this to slapd.conf:

# The next line allows LDAPv2 bind requests, which are disabled by default.
allow bind_v2 bind_anon_dn


However, that would be fine to have an autofs patch with something that allow to use a binddn/bindpassword pair instead of anonymous bind !


[EMAIL PROTECTED] wrote:
Hello,

I'm looking into upgrading my ldap server to 2.1.
In 2.1 of openldap they no longer allow you to bind to a DN w/ a null
password and get anon access (you need to use a null DN as well):

sjh% ldapsearch -x -h server -D ou=People,dc=foo,dc=com -W uid=sjh
Enter LDAP Password: ldap_bind: DSA is unwilling to perform
additional info: unauthenticated bind (DN with no password) disallowed


autofs binds in this way: (lookup_ldap.c line 96)
  /* Connect to the server as an anonymous user. */
  rv = ldap_simple_bind_s(ldap, ctxt->base, NULL);

Is this done for a reason, or is it historical?


-Seth _______________________________________________ autofs mailing list [EMAIL PROTECTED] http://linux.kernel.org/mailman/listinfo/autofs



-- Jehan Procaccia | Ingenieur Systemes & Reseaux Institut National des Telecommunications| Tel : +33 (0) 160764436 MCI, Moyens Communs Informatiques | Mail: [EMAIL PROTECTED] 9 rue Charles Fourier 91011 Evry France | Fax : +33 (0) 160764321

_______________________________________________
autofs mailing list
[EMAIL PROTECTED]
http://linux.kernel.org/mailman/listinfo/autofs

Reply via email to