From @woopstar on November 14, 2017 10:2

This needs to allow anon access to RootDSE for it to work as authentication backend for SSSd in CoreOS etc.

When you use SSSd it fails as it is not allowed to do an anon binding on the RootDSE

Copied from original issue: nmcclain/glauth#5