Re: LDAP search without credetials

2015-08-24 Thread Robert Lemmen
hi carsten, On Fri, Aug 21, 2015 at 07:10:09AM +0200, Carsten Czerner wrote: I understand your points. But is it the best way to start with low security and hope that the administrator knows exactly what to do, like me ;)? I thing its a better way to start with a strong security and adapt it

Re: LDAP search without credetials

2015-08-20 Thread Carsten Czerner
Hi Robert, Am 19.08.2015 um 17:33 schrieb Robert Lemmen: hi carsten, On Mon, Aug 17, 2015 at 01:23:26PM +0200, Carsten Czerner wrote: on my Debian8 slapd installation I can query the ldap-server without typing in any password. That isn't ok!? At the dn: olcDatabase={1}mdb.ldif I found the

Re: LDAP search without credetials

2015-08-19 Thread Robert Lemmen
hi carsten, On Mon, Aug 17, 2015 at 01:23:26PM +0200, Carsten Czerner wrote: on my Debian8 slapd installation I can query the ldap-server without typing in any password. That isn't ok!? At the dn: olcDatabase={1}mdb.ldif I found the following entry: olcAccess: {2}to * by * read I guess

LDAP search without credetials

2015-08-17 Thread Carsten Czerner
Hi, on my Debian8 slapd installation I can query the ldap-server without typing in any password. That isn't ok!? At the dn: olcDatabase={1}mdb.ldif I found the following entry: olcAccess: {2}to * by * read I guess that gives read access to everyone without authentification. It was pure