Novell LINUX ENTERPRISE DESKTOP 11, Manual, Page: 58 / 450

For changes or additional configuration start the LDAP server module again and in the
left pane expand Global Settings to make subentries visible—see
Figure 4.4, “YaST
LDAP Server Configuration” (page 43):
1 With Log Level Settings, configure the degree of logging activity (verbosity) of
the LDAP server. From the predefined list, select or deselect the logging options
according to your needs. The more options are enabled, the larger your log files
grow.
2
From Allow/Disallow Features determine the connection types the LDAP server
should allow. Choose from:
LDAPv2 Bind Requests
This option enables connection requests (bind requests) from clients using
the previous version of the protocol (LDAPv2).
Anonymous Bind When Credentials Not Empty
Normally the LDAP server denies any authentication attempts with empty
credentials (DN or password). Enabling this option, however, makes it pos-
sible to connect with a password and no DN to establish an anonymous
connection.
Unauthenticated Bind When DN Not Empty
Enabling this option makes it possible to connect without authentication
(anonymously) using a DN but no password.
Unauthenticated Update Options to Process
Enabling this option allows non-authenticated (anonymous) update operations.
Access is restricted according to ACLs and other rules .
3 Then from Allow/Disallow Features determine which flags the LDAP server
should disallow. Choose from:
Disable Acceptance of Anonymous Bind Requests
Disable Simple Bind Authentication
Disable Forcing Session to Anonymous Status upon StartTLS Operation Receipt
Disallow the StartTLS Operation if Authenticated
44 Security Guide