I have a few questions about anon binds.
In theory if you have 3000 user objects in the directory and anonymous binds have a limit
returning 2000 entries can you still use anonymous binds in LDAP client configurations
without issues? Or does something else take place when a user logs in that only requires
the LDAP clients (sssd or nscld) to parse that specific user dn and attributes?
Typically, with OpenLDAP I have created a "bind" user that can read all
user/group objects with limited attributes and turned off anon binds so I don't fully
understand the behavior of anonymous binds.
Show replies by date