[danlavu]

I hope this helps but I modified the controller.php so you can bind a username and password, so you do not need to open your ldap server.

My changes are below.

Add the following at

// connect to the LDAP Server

++$ldapBindUser = 'YOUR_BIND_USER';
++$ldapPassword = 'YOUR_BIND_USER_PASSWORD';

For every instance of $ldapConnection add the follow below the line. Should be two instances.

 
$ldapConnection = ldap_connect($ldapServer, $ldapPort);
++$ldapBind = ldap_bind($ldapConnection, $ldapBindUser, $ldapPassword);

Make some changes to the if else statement, delete or comment out the following and change one variable.

 // write the FIRST found DN to $bindDn;
        --$bindDn=$searchResult[0]['dn'];

        // bind to the ldap server with specified credentials (dn, password)
        --$ldap_bind = @ldap_bind($ldapConnection, $bindDn, $vbulletin->GPC['vb_login_password']);

        // close the server connection
        ldap_close($ldapConnection);

        // ldap bind did not succeed, wrong username/password combination
        ++if ($ldapBind != 1)
        --if ($ldap_bind != 1)

Now you should be able to connect to a more secure ldap server. Anonymous queries against my AD makes it hard for me to sleep at night.