problem with ldap client/proxy - read anon but bind with predefined credentials

["Uli Schellhaas" <uli.schellhaas@leute.server.de>]

Hello,

i want to accomplish the following: be able to read from a ldap server, who
doesnt support anon auth, but with anon auth.

I either would need openldaps ldap client to support a general DN and
PASSWORD option for the initially reads, I found out that this option is
user-level, and further, that i cannot predefine a Password for this
user-level-option.

So i thought about some Ldap Proxy. I installed slapd with ldap backend, and
defined some rootdn and rootpw. obviously, this DN and PW isnt used when
contacting the remote ldap server.

How can i get either:
 a client, which supports anon auth and replaces this anon auth with
something i define somewhere,
 or:
a ldap proxy service, supporting anon auth but using itself a defined auth
to contact the remote server for the initial reading ?

I believe this should be possible with openldaps ldap stuff or ?

thanks.: Uli Schellhaas