slapd as non root user listening to standard ldap ports?

[Ben Poliakoff <benp@imap.reed.edu>]

I know the question has been asked before, but I haven't found any
conclusive answer.

It seems that a relatively common goal for OpenLDAP administrators would
be to have slapd run as a non-root user while still answering on the
standard ldap ports.

Of course slapd's "-u USER" option will direct it to run as whatever
arbitrary user, but unless that user is root you'll need to run the
service on a >1024 high port.

Is there any sort of recommended, "best practice" method to acheive this
goal?

Any pointers to RTFM or FAQ would be gratefully accepted (as long as
there is some sort of pointer to said FM or FAQ).

Thanks in advance,

Ben

-- 
---------------------------------------------------------------------------
Ben Poliakoff                                   email: <benp@imap.reed.edu>
Reed College                                           tel:  (503)-788-6674
Unix System Administrator       PGP key: http://www.reed.edu/~benp/key.html
---------------------------------------------------------------------------
0x6AF52019 fingerprint = A131 F813 7A0F C5B7 E74D  C972 9118 A94D 6AF5 2019