[phpldapadmin] Disabled anonymous bind

Hi,

I wanted to enable login through phpldapadmin only to admins and
technicians, so I have added the following code to the config.php.

$servers->setValue('login','allowed_dns',array(
   '(&(|(cn=LDAP Admins)(cn=LDAP Technicians))(objectClass=groupOfNames))'
));

Now when I go to the login page, anonymous bind checkbox is disabled (I
cannot see it). This is correct as I don't want anonymous users to login
through phpldapadmin.

Here is the problem. I login as an admin user and make a search query. This
works fine, the query returns result. I copy the link and then log out. I
paste the link in the browser and can see the results of the search although
I am not logged in. Is this expected behavior? Is it possible to disable
anonymous to see this result? Bellow is an example of the query.

http://server/htdocs/cmd.php?cmd=query_engine&server_id=1&format=list&showresults=na&base=dc%3Dagrokor%2Cdc%3Dhr&scope=sub&filter=uid%3D*adm*&display_attrs=cn%2C+sn%2C+uid%2C+postalAddress%2C+telephoneNumber&orderby=&size_limit=100&search=Search

I also tried to disable anonymous bind by setting anon_bind to false in
config.php ($servers->setValue('login','anon_bind',false);) but the result
was the same.

I am using phpldapadmin 1.2.0.5

Thanks and Regards,
Vesna

------------------------------------------------------------------------------
SOLARIS 10 is the OS for Data Centers - provides features such as DTrace,
Predictive Self Healing and Award Winning ZFS. Get Solaris 10 NOW
http://p.sf.net/sfu/solaris-dev2dev

______________________________________
phpLDAPadmin development mailing list.
To unsbuscribe: https://lists.sourceforge.net/lists/listinfo/phpldapadmin-devel
http://phpldapadmin.sourceforge.net/