Novell LINUX ENTERPRISE SERVER 11 - SECURITY Manual page 58

For changes or additional configuration start the LDAP server module again and in the
left pane expand Global Settings to make subentries visible—see
LDAP Server Configuration"
1 With Log Level Settings, configure the degree of logging activity (verbosity) of
2 From Allow/Disallow Features determine the connection types the LDAP server
3 Then from Allow/Disallow Features determine which flags the LDAP server
44 Security Guide
the LDAP server. From the predefined list, select or deselect the logging options
according to your needs. The more options are enabled, the larger your log files
grow.
should allow. Choose from:
LDAPv2 Bind Requests
This option enables connection requests (bind requests) from clients using
the previous version of the protocol (LDAPv2).
Anonymous Bind When Credentials Not Empty
Normally the LDAP server denies any authentication attempts with empty
credentials (DN or password). Enabling this option, however, makes it pos-
sible to connect with a password and no DN to establish an anonymous
connection.
Unauthenticated Bind When DN Not Empty
Enabling this option makes it possible to connect without authentication
(anonymously) using a DN but no password.
Unauthenticated Update Options to Process
Enabling this option allows non-authenticated (anonymous) update operations.
Access is restricted according to ACLs and other rules .
should disallow. Choose from:
Disable Acceptance of Anonymous Bind Requests
Disable Simple Bind Authentication
Disable Forcing Session to Anonymous Status upon StartTLS Operation Receipt
Disallow the StartTLS Operation if Authenticated
(page 43):
Figure 4.4, "YaST