--- a/doc/book/en/admin/ldap.rst	Tue Mar 02 19:32:46 2010 +0100
+++ b/doc/book/en/admin/ldap.rst	Wed Mar 03 14:06:05 2010 +0100
@@ -47,6 +47,10 @@
 * data-cnx-password, password to use to open data connection to the
   ldap (eg used to respond to rql queries)
 
+If the LDAP server accepts anonymous binds, then it is possible to
+leave data-cnx-dn and data-cnx-password empty. This is, however, quite
+unlikely in practice.
+
 LDAP schema mapping:
 
 * user-base-dn, base DN to lookup for users