[Freeipa-users] Disable Anonymous LDAP another way...

[Martin Kosek]

On 09/24/2014 01:49 AM, Tommy McNeely wrote:
> DISREGARD!
> 
> Sorry all, do not actually try my query, it makes authentication not work
> at least on CentOS6.
> 
> Here is the doc I actually read the first time:
> http://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/disabling-anon-binds.html
> (google search led me here)
> ... which says to turn it off, while the one I linked above:
> http://docs.fedoraproject.org/en-US/Fedora/18/html/FreeIPA_Guide/disabling-anon-binds.html
> says to set it to "rootdse" which allows the necessary access for detecting
> configuration, but blocks access to directory data.
> 
> I just mis-read it on the F18 docs.
> 
> Sorry for the noise :)

One more note - there is a related proposal wrt to upstream guide (as you
probably noticed, you are referring to guide from Fedora 15/18 times:

https://www.redhat.com/archives/freeipa-users/2014-September/msg00357.html

Martin