nerdexam
Linux_Foundation

LFCS · Question #149

Which option should be used to disable anonymous binds to your LDAP directory?

The correct answer is A. disallow bind_anon. To prevent unauthenticated access to an OpenLDAP directory, the disallow bind_anon directive should be added to the slapd.conf file.

Submitted by anjalisingh· Apr 18, 2026Service Configuration

Question

Which option should be used to disable anonymous binds to your LDAP directory?

Options

  • Adisallow bind_anon
  • Bdisallow bind_anon_cred
  • Cdisallow bind_simple_unprotected
  • Ddisallow bind_simple

How the community answered

(15 responses)
  • A
    87% (13)
  • B
    7% (1)
  • D
    7% (1)

Why each option

To prevent unauthenticated access to an OpenLDAP directory, the `disallow bind_anon` directive should be added to the `slapd.conf` file.

Adisallow bind_anonCorrect

The `disallow bind_anon` directive in `slapd.conf` explicitly forbids anonymous bind operations to the LDAP server, effectively preventing clients from connecting and performing operations without providing credentials.

Bdisallow bind_anon_cred

The option `disallow bind_anon_cred` is not a standard or recognized directive in OpenLDAP for disabling anonymous binds.

Cdisallow bind_simple_unprotected

`disallow bind_simple_unprotected` would disable simple binds over unencrypted connections, but not necessarily anonymous binds if other connection types are allowed.

Ddisallow bind_simple

`disallow bind_simple` would disable all simple binds, including authenticated ones, which is a broader restriction than just disabling anonymous access.

Concept tested: OpenLDAP anonymous bind disabling

Source: https://www.openldap.org/software/man.cgi?query=slapd.conf&apropos=0&sektion=5&manpath=OpenLDAP+2.4-Release

Topics

#LDAP#OpenLDAP#Security#Authentication

Community Discussion

No community discussion yet for this question.

Full LFCS Practice