'System' access to LDAPI without a bind in Samba4

Volker Lendecke Volker.Lendecke at SerNet.DE
Wed Jun 10 04:40:41 GMT 2009


On Wed, Jun 10, 2009 at 08:20:34AM +1000, Andrew Bartlett wrote:
> Can you please revert this change until it can be hidden behind an
> EXTERNAL bind?

If you don't want it in the release, feel free to revert it
in v4-0-stable after you merged master there, but until we
have the EXTERNAL stuff in, please keep it in master.

> The reason I ask this is that it is not only cleaner to have the client
> explicitly ask for it's SYSTEM credentials, it is also safer, and more
> in keeping with the LDAP standards (which are clear that without a bind,
> you should be anonymous).

Do you have a reference how to exactly do this?

Thanks,

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20090610/101948a2/attachment.bin


More information about the samba-technical mailing list