[Pkg-openldap-devel] Bug#241202: ldapmodify does not honor -y option

[Stephane Bortzmeyer]

On Wed, May 30, 2007 at 06:16:56PM -0700,
 Russ Allbery <rra at debian.org> wrote 
 a message of 37 lines which said:

> The behavior of -y and of `cat file` is different.  -y uses every
> byte of the file as the password, including any trailing newline,
> whereas backticks will strip any trailing newline and using
> backticks like that on the command line will remove any leading or
> trailing whitespace.

I confirm, with ldapsearch and a "sarge" machine. Now:

# ldapsearch -x  -y /etc/ldap.secret -D cn=admin,dc=eureg,dc=eu  uid=foobar
ldap_bind: Invalid credentials (49)

# emacs -nw /etc/ldap.secret
[Remove trailing newline]

# ldapsearch -x  -y /etc/ldap.secret -D cn=admin,dc=eureg,dc=eu  uid=foobar
# extended LDIF
#
# LDAPv3
...

I suggest to add your excellent explanation to the man page. Many
thanks.