Red Hat Knowledgebase

To disable anonymous binding to an openLDAP server, edit the /etc/openldap/slapd.conf file. Find the line that starts with allow, and remove the the bind_anon_cred and bind_anon_dn options.

For example, if the allow line looks like this :

allow bind_v2 bind_anon_cred bind_anon_dn

Edit the line to like so:

allow bind_v2

Once you save the changes to the slapd.conf file, restart the openldap server with the command:

service ldap restart

Now clients will have to provide a binddn and bind password in order to connect to the openldap server.