Anonymous LDAP users can't search certain fields
Make sure you've enabled the fields for anonymous access, using the domain Configuration Settings document or the database ACL/extended ACL. Keep in mind that you configure fields for anonymous access separately for the LDAP service's primary Domino Directory and for each secondary Domino directory the LDAP service serves.

See Also