[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
breaking up slap_init_user() for better chroot functionality
- To: OpenLDAP-devel@OpenLDAP.org
- Subject: breaking up slap_init_user() for better chroot functionality
- From: Daniel Ott <dott@ncchristian.org>
- Date: Mon, 11 Oct 2004 21:11:43 -0400
- User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.5) Gecko/20031129
I attempted a minimal chroot installation of slapd today which failed
due to the following error:
/etc/pwd.db: No such file or directory
After reading through the source for main.c and user.c and the
discussions on the devel mailing list about the addition of the chroot
feature I'm left wondering if slap_init_user() should be rewritten in
two pieces. The first part of slap_init_user() currently does uid and
gid lookups in the system databases and the second part drops
privilege. If broken up, the first part could then be called before the
chroot allowing for chroot installs without having to copy /etc/pwd.db
to ${CHROOTDIR}/etc/pwd.db.
I'm looking at the 2.2.17 tar ball.
Is this sane or am I missing something?
Regards,
Daniel Ott