How do I authenticate against my LDAP server anonymously?

splatteredbits

Our Active Directory LDAP server allows anonymous connections so I'd like Bamboo to connect anonymously. When I omit the securityPrincipal and securityCredential elements from atlassian-user.xml file and use paddle to test my LDAP settings, I'm told:

> Username is missing from configuration, and anonymous authentication not configured

How do I configure anonymous authentication?

Chris156

Your Active Directory Domain Controllers should not be configured to allow anonymous binds. That's a massive security hole. The LDAP RFC specifications stipulate that LDAP binds should support credential exchange so there is no need to ever allow anonymous binds in AD. I strongly advise you ensure your domain controllers have anonymous binds disabled and set up a limited, read only account in AD that you can use to perform lookups with. Your bind account should be put into its own organizational unit, and not be a member of any groups except "Domain User", and have group policy applied to it that explicitly denies it permission to:

1. Log in as a service.
2. Log in via terminal services (RDP)
3. Log in locally.
4. Interact with the desktop.

Also, all of your LDAP settings go in atlassian-user-custom.xml, as LDAP/AD is a custom repository for Bamboo.