[turba] Fwd: 500, 000 empty binds a day from horde (approximate)

[Chuck Hagenbuch]

Quoting Kevin Konowalec <webadmin at ualberta.ca>:

> We've got an LDAP server configured in Turba which binds correctly  
> and returns results just fine.  But this seems to be something else.  
>  The various machines in our horde cluster have been beating the  
> heck out of our LDAP servers with empty binds.  I can't seem to find  
> any reason why it'd be doing that.  The turba configuration for  
> legitimate connections seems to be fine (and it is, given I can do a  
> LDAP search from Turba with no problems) but it's making all these  
> other requests as well and I can't figure out why.

What else do you have configured to use LDAP? Can you correlate any  
user activity to the anon binds?

> On a side note... might I suggest changing imp's address completion  
> to only kick in after 3 characters typed minimum?  There's no good  
> reason to be hitting LDAP with queries like "a" or "sm" - especially  
> with over 100,000 entries.  The number of results returned is so  
> large it's not even close to useful.

I'm pretty sure it was this way at one point - ticket?

-chuck