On Fri, Nov 18, 2011 at 03:30:14PM +0100, Yves-Alexis Perez wrote:
> Package: slapd
> Version: 2.4.23-7.2
> Severity: wishlist
> File: /usr/sbin/slappasswd

> I have a working setup where I create ldap accounts on an admin box,
> using ldapvi. I'd like to generate ldap password on that box, not on the
> server, and do everything using ldap protocol.

> Currently, the slappassword is in the slapd package, which I dont really
> need / want to install on my admin box. Could it be moved somewhere
> else? It seems that it doesn't fit in ldap-utils because it's
> openldap specific, but I'm not sure putting it alone in a slapd-utils
> package makes sense.

$ stat /usr/sbin/slappasswd |grep Links
Device: fe00h/65024d    Inode: 214165      Links: 9
$

It's an unfortunate implementation detail of slappasswd that this is a hard
link to slapd itself.  So no, it can't really be moved to another package in
its current form, IMHO.

> Another thing is why is it installed in /usr/sbin? As far as I can tell,
> it only *generates* the salted, hashed password and print it to stdout.
> Nothing really needs root permissions, so I'm not sure why it couldn't
> live in /usr/bin.

Yes, that makes sense to me.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slanga...@ubuntu.com                                     vor...@debian.org

Attachment: signature.asc
Description: Digital signature

Reply via email to