Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (athena.apache.org: domain of akarasulu@gmail.com
 designates 209.85.198.224 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:sender:to:subject:in-reply-to:mime-version
         :content-type:references:x-google-sender-auth;
        b=FRVk8SHCUYR+EXbZa80PJBU4tyAn63f1sRaRh5QwHM8Frt7sIL7Vy1AB6guOv2siLe
         zCSW/TwrdUCtl6mCFGuJGwlfuug6sRIrEmw170ptrSq0zLPG9opwl8qcnLenDB1LB2io
         4cLshdB4PQ7bbxgmiziV6pUkl1hW9oEtuTQVA=
Message-ID: <a32f6b020807011836x2b992b4dh1f3cbbe713ac6c6@mail.gmail.com>
Date: Tue, 1 Jul 2008 21:36:16 -0400
From: "Alex Karasulu" <akarasulu@apache.org>
Sender: akarasulu@gmail.com
To: users@directory.apache.org, elecharny@apache.org
Subject: Re: Anon Bind
In-Reply-To: <48662538.7070201@apache.org>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_4296_6682524.1214962577099"
References: <005801c8d89e$e40033b0$0300000a@jamie>
	 <48662538.7070201@apache.org>

------=_Part_4296_6682524.1214962577099
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

In 1.5.4 we will rework the bind mechanism completely, thereby simplifying
the configuration so it's more intuitive.

Alex

On Sat, Jun 28, 2008 at 7:49 AM, Emmanuel Lecharny <elecharny@apache.org>
wrote:

> John Hughes wrote:
>
>> Using 1.5.2 it appears I can do an anonymous bind to the directory -yet
>> the
>> allowAnonymousAccess property is set to false
>>
>>
> There are three places where the allowAnonymousAccess flag should be set =
in
> the server.xml file :
> - defaultDirectoryService
> - ldapServer
> - apacheDS
>
> Obviously, this is a little bit overkilling :)
>
> We should fix that...
>
>>
>> Although when I try and do a search I do then get an access violation.
>>
>>
> Being able to bind as anonymous and being able to fetch an entry out of t=
he
> server are two different things. In fact, you can even do a search on the
> server without being forced to send a BindRequest (the rootDSE is searcha=
ble
> with an anonymous authorization). Now, if the Anonymous access is forbidd=
en,
> you will get an access violation when earching the server, except when
> looing for the rootDSE attributes.
>
>>
>> Is this supposed to happen?
>>
>>
> Basically, yes. I have to double check about the anonymous Bind, but as w=
e
> are currently working on this part of the server, this will be figured ou=
t
> soon.
>
> Thanks !
>
> --
> --
> cordialement, regards,
> Emmanuel L=E9charny
> www.iktek.com
> directory.apache.org
>
>
>

------=_Part_4296_6682524.1214962577099--