boring-assed tech question about LDAP

[rmd]

So, LDAP. And NAT.
When something connects to an LDAP server, does it identify/authenticate itself via something in the actual LDAP connection? Or does the LDAP server rely on the source IP of the connecting host to figure out if the client is or can get to privileged objects?

Comments

[i-leonardo.livejournal.com]

it's configuration dependent. in Your Employer's case, at least when i left, anonymous binds are permitted from on-campus (based on their IP addr range) but were only permitted to see "public" data. as ghastly as it sounds, non-SSL authenticating binds ARE permitted ! so be careful where you type your password, eugene. an application, like the dhcp registration app, can see retrieve un-published user data IF they have an application LDAP entry with its own paswword. when an app needs to authenticate a user, it asks the user to supply their uname and password. the app binds to LDAP (SSL), authenticates itself, uses the uname to search for the user's DN (not the same as the uname), and releases the connection. then it attempts to bind again, this time using the user's DN and password.