[Pkg-openldap-devel] Bug#649176: /usr/sbin/slappasswd: move slappasswd out of /usr/sbin and out of slapd package

[Yves-Alexis Perez]

On ven., 2011-11-18 at 15:03 -0800, Steve Langasek wrote:
> On Fri, Nov 18, 2011 at 03:30:14PM +0100, Yves-Alexis Perez wrote:
> > Package: slapd
> > Version: 2.4.23-7.2
> > Severity: wishlist
> > File: /usr/sbin/slappasswd
> 
> > I have a working setup where I create ldap accounts on an admin box,
> > using ldapvi. I'd like to generate ldap password on that box, not on the
> > server, and do everything using ldap protocol.
> 
> > Currently, the slappassword is in the slapd package, which I dont really
> > need / want to install on my admin box. Could it be moved somewhere
> > else? It seems that it doesn't fit in ldap-utils because it's
> > openldap specific, but I'm not sure putting it alone in a slapd-utils
> > package makes sense.
> 
> $ stat /usr/sbin/slappasswd |grep Links
> Device: fe00h/65024d	Inode: 214165      Links: 9
> $
> 
> It's an unfortunate implementation detail of slappasswd that this is a hard
> link to slapd itself.  So no, it can't really be moved to another package in
> its current form, IMHO.

Hmh, I missed that. Indeed that's a bit unfortunate.
> 
> > Another thing is why is it installed in /usr/sbin? As far as I can tell,
> > it only *generates* the salted, hashed password and print it to stdout.
> > Nothing really needs root permissions, so I'm not sure why it couldn't
> > live in /usr/bin.
> 
> Yes, that makes sense to me.
> 
I guess that's because other links might need to be there, so in case
people have separate partition for /usr/sbin and /usr/bin (not sure it's
really often present or supported in Debian, but you never know).

Splitting the binary(ies) means adding 1.2M to a package, but will that
cause other issues?

Regards,
-- 
Yves-Alexis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20111119/d823a265/attachment.pgp>