Issue 9105 - new feature
Summary: new feature
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.44
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-10-27 16:45 UTC by ydgdsnn@163.com
Modified: 2019-10-28 02:39 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description ydgdsnn@163.com 2019-10-27 16:45:19 UTC 
Full_Name: Nannan Song
Version: 2.4.44
OS: SUSE
URL: 
Submission from: (NULL) (180.110.126.11)


  When LDAP is used to manage user and user's group information, OpenLDAP only
supports the configuration of the plain text password for the read-only user in
the '/etc/ldap.conf/'. The password of the read-only user only supports plain
text storage. So there is a security issue that the authentication credential
files is readable to all users.
  Now we hope LDAP can support the feature that using the encrypted text to save
password for read-only user.
Comment 1 Howard Chu 2019-10-28 02:39:20 UTC 
published 9105
marked public
changed state Open to Closed