[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: execve problem with back-shell



On Mon, Mar 07, 2011 at 02:07:36PM -0500, Michael Smith wrote:

> ~# ls -l /usr/local/bin/backshell.sh
> -rwxr-xr-x 1 mike mike 95 2011-03-04 15:29 /usr/local/bin/backshell.sh

I assume that you can actually execute that from the command-line...
(As the openldap user).

> Problem is the same if I try to execute a system binary, e.g. /bin/echo. 

Do you have AppArmor or SELinux enabled? A security framework of that
sort might well prevent slapd from executing other programs.

Are any of your filesystems mounted with the 'noexec' flag?

Try doing 'cd /' before starting slapd - I notice that your original
post had it starting in your own homedir, which might not be readable
to the openldap user (so it could not do 'pwd' for example).

Andrew
-- 
-----------------------------------------------------------------------
|                 From Andrew Findlay, Skills 1st Ltd                 |
| Consultant in large-scale systems, networks, and directory services |
|     http://www.skills-1st.co.uk/                +44 1628 782565     |
-----------------------------------------------------------------------