Directory Servers can allow read access to anonymous clients which have not been verified, even with a verification process in place. By default, this behavior is disabled in Directory Server versions 1.27 and later.
Use the /b option on the mfds command line to configure the availability of the anonymous read access. See mfds for more information.