On Tue, 24 Jun 2003, Gary C. New wrote:
> I've been using cyrus-imapd-2.0.16 with pam_ldap for > several months now. I am currently trying to tighten > down my openldap directory and have run into a little > snag trying to write an appropriate ACL for this > setup. > > Cyrus-imapd uses pam_ldap to query the ldap directory > anonymously and I cannot seem to find a way to require > either of them to use a defined process account. My > goal is to disallow anonymous access within my > openldap ACLs. > > Does anyone have a similar setup or might be able to > suggest an alternative method for locking anonymous > access down? > > Thank you for your assistance. > > Respectfully, > > > Gary Have you looked at the following options in your pam_ldap.conf file? # The distinguished name to bind to the server with. # Optional: default is to bind anonymously. binddn uid=blah,dc=yahoo,dc=com # The credentials to bind with. # Optional: default is no credential. bindpw secret Andy