[Date Prev][Date Next]
(ITS#8786) Allow OpenLDAP to start as non-root
Full_Name: Akram Ben Aissi
Submission from: (NULL) (22.214.171.124)
We want to run OpenLDAP in containers without root privilege, nor root user id.
Actually, we start it with user uid=100000009, gid=0
And we do proper chgrp 0 and chmod 0770 on require directories.
Because of this: https://github.com/winlibs/openldap/blob/master/servers/slapd/user.c#L158
we have that:
Could not set real user id to 100000009
It would be better to check that setuid is required only if asked user is
different from actual user.
Does it make sense ?