[Pkg-openldap-devel] Bug#385395: Can't run slapd as non-root user

[Mike Brodbelt]

Package: slapd
Version: 2.2.23-8

The package includes instructions for running slapd as a non root user,
however these do not work. Attempting to run as non-root causes the
daemon to fail to start.

This happens because the init script runs :-

"db4.2_recover -eh /var/lib/ldap"

This command gets run as root, and resets permissions and ownership on
the __db.00? files, which in turn causes slapd to be unable to open them.

If the -e switch is omitted, the __db.00? files do not get re-created by
the recovery process, but instead get created when slapd starts, so they
get created with the correct ownership.

Mike