Re: breaking up slap_init_user() for better chroot functionality

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 06:11 PM 10/11/2004, Daniel Ott wrote:
>I attempted a minimal chroot installation of slapd today which failed due to the following error:
>/etc/pwd.db: No such file or directory
>
>After reading through the source for main.c and user.c and the discussions on the devel mailing list about the addition of the chroot feature I'm left wondering if slap_init_user() should be rewritten in two pieces. The first part of slap_init_user() currently does uid and gid lookups in the system databases and the second part drops privilege.  If broken up, the first part could then be called before the chroot allowing for chroot installs without having to copy /etc/pwd.db to ${CHROOTDIR}/etc/pwd.db.

If all you want to do is avoid -u/-g from accessing
passwd/group files in the chroot environment, simply
do:
  slapd -u `id -u ldap` -g `id -g ldap` -r ~ldap

No need to change long established command line semantics.

Kurt