[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: new module overlay modtrigger

> Maarten Vanraes wrote:
>> Hey,
>>
>> a few years back i wrote an overlay module "modtrigger", that executes a
>> script on modifications.
>
> The preferred approach these days is to use slapo-sock.
>
> fork/exec is still risky on some threading implementations. This is also
> why
> back-shell is not recommended for general use.
>
>> Some of the comments i got was that it should really require to work
>> with
>> the new config structure.
>>
>> Finally i've done that, but i'm sure it could be improved.
>>
>> So, i'm kind of asking if someone can review it and give some pointers
>> to
>> improve.
>>
>> and next if it's possible to include in the openldap distribution, in
>> the
>> overlay section or contrib section.
>
> Thanks for the effort but I don't believe it would be a good idea to
> include
> this code for the above reasons.

ugh, great...

otoh, if back-shell is not recommended, then modtrigger could be there
anyway. if the system is properly shielded and limited (eg: cgroups), then
the sysadmin could actually use this, no?