Re: Red Hat Implementation

[Jim Krebs <jim@totallinux.com.br>]

I found out that it's better to use "s" flags on both user and group
permissions. As you mentioned, if I run slapd as root, it will create
the database files as root, thus making it unaccessible to the ldap
user. This solved most of my problems.

On Tue, 2003-12-02 at 15:51, Andreas wrote:
> On Tue, Dec 02, 2003 at 03:38:58PM -0200, Jim Krebs wrote:
> > Should I change the DB files ownership to ldap/ldap?, instead of more
> > open file access permissions?
> 
> Here with Conectiva Linux I use 0700 ldap.ldap for the database directory and
> 0600 ldap.ldap for its files. You should check how redhat's openldap is run
> (perhaps it uses another user).
>