Bug#977123: ldapadd: simple authentication works without setting of -x

[David Damago]

Package: ldap-utils
Version: 2.4.47+dfsg-3+deb10u4
Severity: minor
Tags: upstream

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

ldapadd used without -x and without SASL of course performs
a simple bind and add entries to the OpenLDAP server. Other
LDAP clients, e.g. ldapsearch, ldapwhoami, .. still
require -x for simple authentication.

Thank you,

Werner

- -- System Information:
Debian Release: 10.7
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-13-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages ldap-utils depends on:
ii  libc6          2.28-10
ii  libgnutls30    3.6.7-4+deb10u5
ii  libldap-2.4-2  2.4.47+dfsg-3+deb10u4
ii  libsasl2-2     2.1.27+dfsg-1+deb10u1

Versions of packages ldap-utils recommends:
ii  libsasl2-modules  2.1.27+dfsg-1+deb10u1

Versions of packages ldap-utils suggests:
ii  libsasl2-modules-gssapi-mit  2.1.27+dfsg-1+deb10u1

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
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=QuDI
-----END PGP SIGNATURE-----