Comment 2 for bug 66925

Revision history for this message
In , Max Bowsher (maxb) wrote : 343113 is serious

retitle 343113 admin password set via debconf is not correctly set in
the ldap directory
severity 343113 serious
thanks

I've increased the severity of this bug, because it affects every fresh
installation of the current etch/sid version, and creates a
hard-to-debug problem for someone new to slapd trying to set up the package.

The problem is as Marian Andre describes above - config maintainer
scripts are called twice, once at preconfigure time, once at postinst time.

Fortunately, the server denies binds with an empty password, so this
doesn't result in a security exposure.

A quick bugfix, if not very elegant, would be to simply not re-hash the
password if slapd/password1 == slapd/password2 == "" and
slapd/internal/adminpw != "".

One method for users to work around this until it is fixed is to
temporarily set a rootdn and rootpw in slapd.conf, to log on to the
directory to fix the broken password.

Max.