I am trying to configure the Novell Client to login thru LDAP Contextless Login on Windows 7. I read from this thread and realize that the [Public] object on the tree must have READ and COMPARE inheritable rights for contextless login. In my tree, all user information is hosted in the ou's of ou=user. I then added [Public] to ou=user, assiged [All Attributes Rights] and checked the READ and COMPARE rights.... and it works!

... yet, I know this is probably an easy way out. LDAP contextless login shouldn't need [All Attributes Rights] for it to work. What are the basic properties required for LDAP contextless login to work?