[Pkg-openldap-devel] Bug#649176: /usr/sbin/slappasswd: move slappasswd out of /usr/sbin and out of slapd package

[Steve Langasek]

On Fri, Nov 18, 2011 at 03:30:14PM +0100, Yves-Alexis Perez wrote:
> Package: slapd
> Version: 2.4.23-7.2
> Severity: wishlist
> File: /usr/sbin/slappasswd

> I have a working setup where I create ldap accounts on an admin box,
> using ldapvi. I'd like to generate ldap password on that box, not on the
> server, and do everything using ldap protocol.

> Currently, the slappassword is in the slapd package, which I dont really
> need / want to install on my admin box. Could it be moved somewhere
> else? It seems that it doesn't fit in ldap-utils because it's
> openldap specific, but I'm not sure putting it alone in a slapd-utils
> package makes sense.

$ stat /usr/sbin/slappasswd |grep Links
Device: fe00h/65024d	Inode: 214165      Links: 9
$

It's an unfortunate implementation detail of slappasswd that this is a hard
link to slapd itself.  So no, it can't really be moved to another package in
its current form, IMHO.

> Another thing is why is it installed in /usr/sbin? As far as I can tell,
> it only *generates* the salted, hashed password and print it to stdout.
> Nothing really needs root permissions, so I'm not sure why it couldn't
> live in /usr/bin.

Yes, that makes sense to me.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20111118/223bde0f/attachment.pgp>