Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread Konstantin Boyandin
01/12/2011 09:56 PM, TAKAHASHI Motonobu пишет: > 2011/1/12 Konstantin Boyandin : >> smbldap-passwd may be called by non-root; thus, >> /etc/smbldap-tools/smbldap_bind>conf >> must be world-readable, and it keeps the passwords as plain text. > > smbldap-passwd accesses to LDAP as a user who invoked

Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread TAKAHASHI Motonobu
2011/1/12 Konstantin Boyandin : > smbldap-passwd may be called by non-root; thus, > /etc/smbldap-tools/smbldap_bind>conf > must be world-readable, and it keeps the passwords as plain text. smbldap-passwd accesses to LDAP as a user who invoked itself. This behavior is different from Samba itself a

Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread Konstantin Boyandin
muel...@tropenklinik.de > Internet: www.tropenklinik.de > --- > > -Ursprüngliche Nachricht- > Von: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] Im > Auftrag von Konstantin Boyandin > Gesendet: Mittwoch, 12. Januar 2011 08:50

Re: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-12 Thread Daniel Müller
. Januar 2011 08:50 An: samba@lists.samba.org Betreff: [Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure? Hello, On http://wiki.samba.org/index.php/4.0:_User_Management it is described how to set up and use smbldap-tools package. The question is, how to hide master

[Samba] smbldap-tools security: how to keep passwords in smbldap_bind.conf secure?

2011-01-11 Thread Konstantin Boyandin
Hello, On http://wiki.samba.org/index.php/4.0:_User_Management it is described how to set up and use smbldap-tools package. The question is, how to hide master passwords in such a case? smbldap-passwd may be called by non-root; thus, /etc/smbldap-tools/smbldap_bind>conf must be world-readable, an