Annuaire LDAP
Find a file
Kurt Zeilenga 8de258d2e2 Patch: 'ldapmodify -y file' reads password from file (ITS#2031)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]
2002-08-24 05:47:17 +00:00
build Detect EBCDIC for SP2NL/NL2SP translation 2002-07-27 00:56:33 +00:00
clients Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
contrib LDAP auxprop plugin for external SASL-enabled servers 2002-07-13 07:20:38 +00:00
doc Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
include Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
libraries Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
servers Added thread-pool getkey/setkey functions 2002-08-24 05:39:43 +00:00
tests backout last change... too tired to make this work right now. 2002-08-12 22:33:43 +00:00
acconfig.h Update copyright statements 2002-01-04 21:17:25 +00:00
acinclude.m4 Update copyright statements 2002-01-04 21:17:25 +00:00
aclocal.m4 Update Cyrus SASL detection to always look for <sasl.h> regardless 2002-02-10 17:51:19 +00:00
configure Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
configure.in Patch: 'ldapmodify -y file' reads password from file (ITS#2031) 2002-08-24 05:47:17 +00:00
COPYRIGHT Remove info@openldap.org address. 2002-06-02 07:28:55 +00:00
INSTALL Updates from SDF 2002-02-18 18:10:25 +00:00
LICENSE Update to 2.7 2001-09-08 04:30:14 +00:00
Makefile.in Misc. DN fixes and cleanups, namely don't muck with AVA_BINARY values 2002-02-13 06:35:27 +00:00
README Minor rewording 2001-09-28 21:22:00 +00:00

OpenLDAP Devel README
	This software was obtained from the development branch (HEAD) of
	the OpenLDAP Software Repository.  This copy is likely already
	not current, the development branch changes frequently.  These
	changes include code implementing experimental features and
	unproven bug fixes.  Please do NOT redistribute copies of the
	development branch.

	The OpenLDAP Developer's FAQ is available at:
		http://www.openldap.org/faq/index.cgi?file=4

	Client developers seeking a suitable development platform
	should use "release" or "stable" versions.
		http://www.openldap.org/software/

---
$OpenLDAP$