On Wed, Oct 16, 2002 at 11:08:11AM +0200, Massimiliano Mirra wrote:

> When slapd (LDAP server daemon) is configured to replicate itself to
> another server, on each addition/modification to the directory it will
> store the changes to be replicated in /var/lib/ldap/replog.  This
> directory is world readable and entries like userPassword will be visible
> (although on sensible setups they will already be hashed to MD5 or SHA).
> slurpd will then pick the changes up, push them to the slave directory,
> and store them in /var/spool/slurpd/replica/slurpd.replog, which is a
> complete log of changes applied by slurpd and is world readable as well.
> 
> Am I missing something or should a bug be filed?

It sounds like a bug, but if you are unsure you should contact the
maintainer of the slapd package (CC'd), who is more capable of answering
authoritatively than the debian-security mailing list.

-- 
 - mdz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to