LFCS · Question #149
Which option should be used to disable anonymous binds to your LDAP directory?
The correct answer is A. disallow bind_anon. To prevent unauthenticated access to an OpenLDAP directory, the disallow bind_anon directive should be added to the slapd.conf file.
Question
Options
- Adisallow bind_anon
- Bdisallow bind_anon_cred
- Cdisallow bind_simple_unprotected
- Ddisallow bind_simple
How the community answered
(15 responses)- A87% (13)
- B7% (1)
- D7% (1)
Why each option
To prevent unauthenticated access to an OpenLDAP directory, the `disallow bind_anon` directive should be added to the `slapd.conf` file.
The `disallow bind_anon` directive in `slapd.conf` explicitly forbids anonymous bind operations to the LDAP server, effectively preventing clients from connecting and performing operations without providing credentials.
The option `disallow bind_anon_cred` is not a standard or recognized directive in OpenLDAP for disabling anonymous binds.
`disallow bind_simple_unprotected` would disable simple binds over unencrypted connections, but not necessarily anonymous binds if other connection types are allowed.
`disallow bind_simple` would disable all simple binds, including authenticated ones, which is a broader restriction than just disabling anonymous access.
Concept tested: OpenLDAP anonymous bind disabling
Source: https://www.openldap.org/software/man.cgi?query=slapd.conf&apropos=0&sektion=5&manpath=OpenLDAP+2.4-Release
Topics
Community Discussion
No community discussion yet for this question.