It seems you're still passing an anonymous bind to the server, as a simple username doesn't qualify as DN.