anyone on the local network can bind to ldap server anonymously and get the list of all UID + GID's. this is absolutely ugly AND insecure. disclosing the UID information to everyone is just wrong concept. M. »