Ubuntu
openldap2.2 package

Permissions for ldapi:// socket are too restrictive

Bug #114438 reported by Martin Emrich
8
Affects Status Importance Assigned to Milestone
openldap2.2 (Ubuntu)
Fix Released
Undecided
Unassigned
Dapper
Invalid
Undecided
Unassigned

Bug Description

On dapper i386, slapd creates the ldapi:// socket with

srwxr-xr-x 1 root root 0 2007-05-03 19:24 /var/run/ldapi

So only root processes can communicate with slapd via the unix socket. After setting it to

srwxrwxrwx 1 root root 0 2007-05-03 19:33 /var/run/ldapi

libnss-ldap et.al. work properly. I found this thread on the openldap mailing list:
http://www.openldap.org/lists/openldap-software/200502/msg00176.html

I fixed it here by adding these three lines right after start_slapd and start_slurpd in my /etc/init.d/slapd file:

        if [ -S /var/run/ldapi ]; then
                chmod a+rwx /var/run/ldapi
        fi

Ciao

Martin

Revision history for this message
Mathias Gug (mathiaz) wrote :

Thank you for taking the time to report this bug and helping to make Ubuntu better. However, I am closing it because the bug has been fixed in the latest development version of Ubuntu - the Intrepid Ibex.

This is a signficant bug in Ubuntu. If you need a fix for the bug in previous versions of Ubuntu, please do steps 1 and 2 of the SRU Procedure [1] to bring the need to a developer's attention.

[1]: [WWW] https://wiki.ubuntu.com/StableReleaseUpdates#head-a7a957d3d691c2754ba24e5085481107ed703b49

Changed in openldap2.2:
status: New → Fix Released
Revision history for this message
JC Hulce (soaringsky) wrote :

Thank you for reporting this bug to Ubuntu. The version of Ubuntu referenced in this issue has reached end of life, and the issue is fixed in newer versions of Ubuntu. Therefore, I am closing the Dapper task.
Please see this document for currently supported Ubuntu releases:
https://wiki.ubuntu.com/Releases

Changed in openldap2.2 (Ubuntu Dapper):
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.