Merge ~sergiodj/ubuntu/+source/openldap:bug1557157-bionic into ubuntu/+source/openldap:ubuntu/bionic-devel
Status: | Merged | ||||
---|---|---|---|---|---|
Approved by: | Christian Ehrhardt | ||||
Approved revision: | bad9e1f9909b883ce6bdb238b3cd20a894e90bf8 | ||||
Merge reported by: | Andreas Hasenack | ||||
Merged at revision: | bad9e1f9909b883ce6bdb238b3cd20a894e90bf8 | ||||
Proposed branch: | ~sergiodj/ubuntu/+source/openldap:bug1557157-bionic | ||||
Merge into: | ubuntu/+source/openldap:ubuntu/bionic-devel | ||||
Diff against target: |
34 lines (+9/-1) 2 files modified
debian/apparmor-profile (+2/-1) debian/changelog (+7/-0) |
||||
Related bugs: |
|
Reviewer | Review Type | Date Requested | Status |
---|---|---|---|
Christian Ehrhardt (community) | Approve | ||
Canonical Server | Pending | ||
Canonical Server Core Reviewers | Pending | ||
Review via email: mp+385757@code.launchpad.net |
Description of the change
When using openldap with sasl authentication, the slapd process will communicate with the saslauthd daemon via a socket in {,/var}
This simple change implements the fix to allow the authentication process to happen.
It's possible to test it by doing:
$ lxc launch ubuntu-daily:bionic openldap-
$ lxc shell openldap-
# apt install slapd sasl2-bin ldap-utils apparmor-utils
(As the domain name, use "example.com").
# sed -i -e 's/^START=
# cat > /etc/ldap/
mech_list: PLAIN
pwcheck_method: saslauthd
__EOF__
# adduser openldap sasl
# aa-enforce /etc/apparmor.
# systemctl restart slapd.service
# systemctl restart saslauthd.service
# passwd root
(You can choose any password here. You will need to type it when running the next command.)
# ldapsearch -H ldapi:/// -LLL -b 'dc=example,dc=com' -s base -U root -Y PLAIN
If you are using the fixed package, you will see something like:
SASL username: root
SASL SSF: 0
dn: dc=example,dc=com
objectClass: top
objectClass: dcObject
objectClass: organization
o: example
dc: example
There is a PPA here: https:/
autopkgtest is still happy (well, because of a bug, there is no d/tests/control file, so no tests are run):
autopkgtest [11:57:32]: build not needed
* SKIP no tests in this package
autopkgtest [11:57:32]: @@@@@@@
* SKIP no tests in this package
Change itself LGTM, is is small simple and reasonable.