Re: [GENERAL] ldap authentication allows logon with blank password

2007-12-06 Thread lighthouse . software
After some investigation into Open LDAP I discovered that a post that states: "A bind with a DN but with an empty password is equivalent to an anonymous bind, while a bind with a DN and with a wrong password is not;" So could this cause a blank password to allow access to the database as the LDAP

Re: [GENERAL] ldap authentication allows logon with blank password

2007-12-04 Thread lighthouse . software
Here is the log output when I try different passwords: When I enter an incorrect password I get the following: [unknown] [unknown] 2007-12-05 13:55:29 CST LOG: connection received: host=111.111.111.111 port=1791 user test_db 111.111.111.111 2007-12-05 13:55:29 CST DEBUG: received password pack