Re: dn="" and anonymous

[Philip Guenther <guenther+ldapsoft@sendmail.com>]

On Fri, 20 Jul 2007, Thierry Lacoste wrote:
> What is the difference between dn="" and anonymous?
>
> conn=4069 op=3 BIND dn="" method=128

This is an actual simple bind request (128 == LDAP_AUTH_SIMPLE).


> conn=10515 op=4 BIND anonymous mech=implicit ssf=0

When a bind is received, the connection's existing authorization (if any) 
is cancelled.  That log message generated by slapd when a bind is received 
on a connection that has an existing binding, logging the reversion to 
anonymous done at the beginning of the bind.


Philip Guenther