Re: passwd backend operational?

[Hallvard B Furuseth <h.b.furuseth@usit.uio.no>]

Jorge Amador Arenas Quezada writes:
>> 1.- in some information collected in internet found references about
>> the backend passwd support claiming about not use this module because
>> is not fully implemented (the read only condition is not a problem
>> because i only want to authenticate my users in passwd) ... my first
>> question is ... is operational this module ?

As the slapd-passwd(5) manpage says, "This backend is provided for
demonstration purposes only".

>> May 20 23:03:01 server slapd[6781]: conn=77 op=0 BIND
>> (...)
>> text=operation not supported within naming context

Right.  Search is the only operation that backend supports.

Though I suppose it could be useful to update it so it can be used for
authentication.  And to add an option which prohibits the "search the
entire passwd file/database", since getpwent() is not reentrant so
other passwd lookups are blocked while it's searching...

On the other hand, I think you can authenticate with passwords from
getpwnam() already: Put
   userPassword: {UNIX}username
in an entry, then it'll have that user's password.

>> database        passwd
>> (...)
>> directory       /var/lib/ldap
>> index objectClass                       eq,pres

And it does not use "directory" nor indexes, since it does not
maintain any data.  It gets its data from getpwent()/getpwnam().

-- 
Regards,
Hallvard