Jonathan,
You will want to set "nsslapd-allow-anonymous-access" within
"cn=config"
to "rootdse":
$ ldapmodify -x -D "cn=Directory Manager" -W -h
server.example.com -p
389 -ZZ
dn: cn=config
changetype: modify
replace: nsslapd-allow-anonymous-access
nsslapd-allow-anonymous-access: rootdse
Do this for all IPA Servers, as each cn=config is unique.
Striker
On 2/11/22 8:12 AM, MERCIER Jonathan via FreeIPA-users wrote:
Dear FreeIPA community and Dev Team,
We have installed some month ago freeipa throw ansible collection/role, and I see that we
can query the LDAP to get registered user. For us it is a medium issue, I would like to
know, how to allow LDAP query only through an authentication.
Did you have a wiki or a documentation for this ?
Thanks a lot
Best regards
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure