Skip to content

Debian package doesn't create lightldapd user. #7

@dbaarda

Description

@dbaarda

The debian package by default just runs lightldapd as root.

Instead it should create a lightldapd user and run lightldapd with '-u lightldapd'.

It might also be nice to optionally set a password for lightldapd, add lightldapd to group shadow, and run it with '-r lightldapd'. This would allow lightldapd to export shadowAccount data. However, this is a security hole if the client machines (specifically root on client machines with access to the lightldapd password) are untrusted, so it should be optional, and not the default.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions