14.2. Anonymous Sessions

The hierarchical database does make it possible for clients to create anonymous sessions. These are never authenticated, and they are generally given only the readonly role. Of course, you can choose to configure anonymous sessions to use any of the three roles, though be careful granting more than readonly.

When a client attempts to authenticate normally by supplying credentials, should that authentication fail, the repository can do one of two things:

This is often useful in applications that want to always provide at least some read-only functionality for all users.