The end user sends to the application or middle tier a request containing a query

32-8 Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory Introduction to Anonymous Binds An anonymous bind is one that uses simple authentication with no password. By default, the directory server allows anonymous bind, but allows only search operations on root DSE entry for anonymous users. You can configure the server to allow all anonymous binds or to disallow anonymous binds. This behavior is controlled by the orclanonymousbindsflag attribute of the s server instance-specific configuration entry. Table 32–4 lists the allowed values for orclanonymousbindsflag and the resulting directory server behavior. Managing Anonymous Binds In Oracle Internet Directory 11g Release 1 11.1.1, anonymous binds are allowed by default, but anonymous users can only perform search operations on the root DSE entry. You can use either Fusion Middleware Control or the command line to change the servers behavior with respect to anonymous binds. Managing Anonymous Binds by Using Fusion Middleware Control To manage anonymous binds by using Oracle Enterprise Manager Fusion Middleware Control:

1. Select Administration, then Server Properties from the Oracle Internet Directory

menu, then select the General. tab. 2. From the Anonymous Binds list, select Allows to enable anonymous binds. Select Disallow except for Read Access on the root DSE to allow only search operations on root DSE entry for anonymous users. To disable anonymous binds by using:

1. Select Administration, then Server Properties from the Oracle Internet Directory

menu, then select the General. tab. 2. From the Anonymous Binds list, select Disallow. Managing Anonymous Binds by Using the Command Line To enable all anonymous bind on the Oracle Internet Directory instance with componentName oid1 using ldapmodify, you would type: ldapmodify -D cn=orcladmin -q -p portNum -h hostname -f ldifFile with an LDIF file such as: dn: cn=oid1,cn=osdldapd,cn=subconfigsubentry changetype: modify replace: orclAnonymousBindsFlag orclAnonymousBindsFlag: 1 Table 32–4 Orclanonymousbindsflag Value and Directory Server Behavior orclAnonymousBindsFlag Value Directory Server Behavior Disallows anonymous bind 1 Allows anonymous bind 2 Allows anonymous bind but allows only search operations on root DSE entry for anonymous users default