diff -u ./README.md.orig ./README.md
--- ./README.md.orig	2021-11-18 11:43:50.000000000 -0800
+++ ./README.md	2021-11-18 11:42:19.000000000 -0800
@@ -73,7 +73,8 @@
 #### `ldap-password`
 
 The `ldap-password` option supplies the password associated with the LDAP user
-(given by option `ldap-user`).
+(given by option `ldap-user`). For anonymous binding, leave ldap-password and
+ldap-user blank.
 
 #### `ldap-server`
 
@@ -117,7 +118,8 @@
 #### `ldap-user`
 
 The `ldap-user` option states the username (Distinguished Name) used to bind to
-the LDAP server (given by option `ldap-server`).
+the LDAP server (given by option `ldap-server`). For anonymous binding, leave
+ldap-user and ldap-password blank.
 
 # Deployment
 
diff -u ./lib/charm/openstack/keystone_ldap.py.orig ./lib/charm/openstack/keystone_ldap.py
--- ./lib/charm/openstack/keystone_ldap.py.orig	2021-11-18 10:37:01.000000000 -0800
+++ ./lib/charm/openstack/keystone_ldap.py	2021-11-18 11:47:08.000000000 -0800
@@ -133,8 +133,6 @@
         """
         required_config = {
             'ldap_server': hookenv.config('ldap-server'),
-            'ldap_user': hookenv.config('ldap-user'),
-            'ldap_password': hookenv.config('ldap-password'),
             'ldap_suffix': hookenv.config('ldap-suffix'),
         }